Event Viewer exception code 0xc0000005 - analysed and disassembled!

Hi GGG team - if you have time please reach out to me!
Myself and a few others (https://www.reddit.com/r/PathOfExile2/comments/1n3ueeq/multiple_crashes_and_two_blue_screens/)

It seems to be happening on systems running some version of the 4070ti - in my case the 4070ti and in these 2 redditors cases the 4070ti SUPER

I personally have tried the following changes to the game settings:

Vulkan renderer
D12 renderer
adjust graphics settings across all ranges from lowest to highest
Disabled and enabled DLSS/Nvidia reflex
forced windowed mode through steam
deleted game cache
Verified game file integrity multiple times
deleted the game folder under documents->my games
Moved the game from one SSD to the other
Full clean uninstall and reinstall

System changes:
Started on the last known stable NVIDIA driver (566.36) -> crashing every couple minutes with the same exception code, sometimes can't even load in before the crash occurs

Updated to the most recent driver -> no improvement

Rollback (with DDU) to the most recent driver I was playing with no issues (581.15) -> this time the crashes still occur, even though I had been playing on this driver a couple weeks beforehand.

When did these crashes first start occurring? A: The same day the league disappeared and merged with standard league

Other system changes:
All other drivers are up to date
I disabled all in game overlays including discord, steam, medal and was NOT using a loot filter yet.
uninstalled poe2uncrasher (parks cores and disables multithreading during loading screens automatically cause that was also a common crash)
Set Shader cache size to unlimited
My System all runs at stock with NO overclocking and is completely stable in all other games.
Ran system file checks and all good

I've now analyzed my dump file and it seems like there's an invalid pointer in the actual game code causing my crash specifically:

This is my full analasyis of the dmp file:
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************


KEY_VALUES_STRING: 1

Key : AV.Dereference
Value: String

Key : AV.Type
Value: Read

Key : Analysis.CPU.mSec
Value: 796

Key : Analysis.Elapsed.mSec
Value: 1700

Key : Analysis.IO.Other.Mb
Value: 0

Key : Analysis.IO.Read.Mb
Value: 1

Key : Analysis.IO.Write.Mb
Value: 95

Key : Analysis.Init.CPU.mSec
Value: 5843

Key : Analysis.Init.Elapsed.mSec
Value: 989844

Key : Analysis.Memory.CommitPeak.Mb
Value: 228

Key : Analysis.Version.DbgEng
Value: 10.0.27871.1001

Key : Analysis.Version.Description
Value: 10.2505.01.02 amd64fre

Key : Analysis.Version.Ext
Value: 1.2505.1.2

Key : Failure.Bucket
Value: INVALID_POINTER_READ_c0000005_PathOfExileSteam.exe!Unknown

Key : Failure.Exception.Code
Value: 0xc0000005

Key : Failure.Exception.IP.Address
Value: 0x7ff6cd68663f

Key : Failure.Exception.IP.Module
Value: PathOfExileSteam

Key : Failure.Exception.IP.Offset
Value: 0x116663f

Key : Failure.Hash
Value: {a19c0cb3-571f-205a-a67c-4b1d2bc9161b}

Key : Failure.ProblemClass.Primary
Value: INVALID_POINTER_READ

Key : Timeline.OS.Boot.DeltaSec
Value: 346

Key : Timeline.Process.Start.DeltaSec
Value: 32

Key : WER.OS.Branch
Value: ge_release

Key : WER.OS.Version
Value: 10.0.26100.1


FILE_IN_CAB: PathOfExileSteam.exe.2924.dmp

NTGLOBALFLAG: 0

APPLICATION_VERIFIER_FLAGS: 0

CONTEXT: (.ecxr)
rax=000000d7407fd3f0 rbx=0000051b6fa335d0 rcx=0000000000000229
rdx=0000051b6fa335d0 rsi=0000051b7bfa5b00 rdi=000000d7417fd410
rip=00007ff6cd68663f rsp=000000d7407fd3b0 rbp=000000d7407fd550
r8=0000000000000314 r9=0000000000000000 r10=000000d7407fdda0
r11=000005007364642e r12=0000051b2e3bad18 r13=0000051b2e3bad90
r14=000000d7407fef70 r15=c30c30c30c30c30d
iopl=0 nv up ei pl zr na po nc
cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010246
PathOfExileSteam+0x116663f:
00007ff6`cd68663f 493b9b28090000 cmp rbx,qword ptr [r11+928h] ds:00000500`73646d56=????????????????
Resetting default scope

EXCEPTION_RECORD: (.exr -1)
ExceptionAddress: 00007ff6cd68663f (PathOfExileSteam+0x000000000116663f)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: 0000050073646d56
Attempt to read from address 0000050073646d56

PROCESS_NAME: PathOfExileSteam.exe

READ_ADDRESS: 0000050073646d56

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.

EXCEPTION_CODE_STR: c0000005

EXCEPTION_PARAMETER1: 0000000000000000

EXCEPTION_PARAMETER2: 0000050073646d56

STACK_TEXT:
000000d7`407fd3b0 00007ff6`cd68653e : 0000051b`6fa335d0 00000000`00000229 000000d7`407fd550 00000000`00000058 : PathOfExileSteam+0x116663f
000000d7`407fd3f0 00007ff6`cd69b018 : 00000000`000001e1 00000000`0000022a 0000051b`6fa337a0 00007ff6`d06e3ad0 : PathOfExileSteam+0x116653e
000000d7`407fd450 00007ff6`cd59679b : 00000000`00000010 0000051b`6f554480 0000051b`6f554510 00000000`00000058 : PathOfExileSteam+0x117b018
000000d7`407feb40 00007ff6`cd59aead : 00007ff6`d06e3bc0 000000d7`407ff498 00007ff6`d06e3ad0 0000051b`2e3bad18 : PathOfExileSteam+0x107679b
000000d7`407ff140 00007ff6`cd59d179 : 000000d7`407ff4f0 00000000`00000000 000000d7`407ff938 00000000`00000000 : PathOfExileSteam+0x107aead
000000d7`407ff490 00007ff6`cd3af3a6 : 00007ff6`d06e3ad0 0000051a`dc1e01c0 00000000`00000000 00000000`00000000 : PathOfExileSteam+0x107d179
000000d7`407ff900 00007ff6`cd3b0851 : 0000051a`dc1e0a10 00000000`00000000 00000000`00000000 00007ff6`cd3ad4f8 : PathOfExileSteam+0xe8f3a6
000000d7`407ff990 00007ff6`cd3ad50e : 0000051a`dc1e09c0 00000000`00000000 00000000`00000000 00000000`00000000 : PathOfExileSteam+0xe90851
000000d7`407ff9c0 00007ff6`cc711e76 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : PathOfExileSteam+0xe8d50e
000000d7`407ffa10 00007ff6`cc711801 : 0000051a`dc14d220 00000000`00000000 00000000`00000000 00000000`00000000 : PathOfExileSteam+0x1f1e76
000000d7`407ffa40 00007ff6`cd3b1079 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : PathOfExileSteam+0x1f1801
000000d7`407ffa70 00007ffb`1a0de8d7 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : PathOfExileSteam+0xe91079
000000d7`407ffad0 00007ffb`1b69c34c : 00000000`00000000 00000000`00000000 000004f0`fffffb30 000004d0`fffffb30 : kernel32!BaseThreadInitThunk+0x17
000000d7`407ffb00 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x2c


SYMBOL_NAME: PathOfExileSteam+116663f

MODULE_NAME: PathOfExileSteam

IMAGE_NAME: PathOfExileSteam.exe

STACK_COMMAND: dt ntdll!LdrpLastDllInitializer BaseDllName ; dt ntdll!LdrpFailureData ; ~19s; .ecxr ; kb

FAILURE_BUCKET_ID: INVALID_POINTER_READ_c0000005_PathOfExileSteam.exe!Unknown

OS_VERSION: 10.0.26100.1

BUILDLAB_STR: ge_release

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

FAILURE_ID_HASH: {a19c0cb3-571f-205a-a67c-4b1d2bc9161b}

Followup: MachineOwner
---------

0:019> .ecxr
rax=000000d7407fd3f0 rbx=0000051b6fa335d0 rcx=0000000000000229
rdx=0000051b6fa335d0 rsi=0000051b7bfa5b00 rdi=000000d7417fd410
rip=00007ff6cd68663f rsp=000000d7407fd3b0 rbp=000000d7407fd550
r8=0000000000000314 r9=0000000000000000 r10=000000d7407fdda0
r11=000005007364642e r12=0000051b2e3bad18 r13=0000051b2e3bad90
r14=000000d7407fef70 r15=c30c30c30c30c30d
iopl=0 nv up ei pl zr na po nc
cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010246
PathOfExileSteam+0x116663f:
00007ff6`cd68663f 493b9b28090000 cmp rbx,qword ptr [r11+928h] ds:00000500`73646d56=????????????????
0:019> r
Last set context:
rax=000000d7407fd3f0 rbx=0000051b6fa335d0 rcx=0000000000000229
rdx=0000051b6fa335d0 rsi=0000051b7bfa5b00 rdi=000000d7417fd410
rip=00007ff6cd68663f rsp=000000d7407fd3b0 rbp=000000d7407fd550
r8=0000000000000314 r9=0000000000000000 r10=000000d7407fdda0
r11=000005007364642e r12=0000051b2e3bad18 r13=0000051b2e3bad90
r14=000000d7407fef70 r15=c30c30c30c30c30d
iopl=0 nv up ei pl zr na po nc
cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010246
PathOfExileSteam+0x116663f:
00007ff6`cd68663f 493b9b28090000 cmp rbx,qword ptr [r11+928h] ds:00000500`73646d56=????????????????
0:019> kv
*** Stack trace for last set context - .thread/.cxr resets it
# Child-SP RetAddr : Args to Child : Call Site
00 000000d7`407fd3b0 00007ff6`cd68653e : 0000051b`6fa335d0 00000000`00000229 000000d7`407fd550 00000000`00000058 : PathOfExileSteam+0x116663f
01 000000d7`407fd3f0 00007ff6`cd69b018 : 00000000`000001e1 00000000`0000022a 0000051b`6fa337a0 00007ff6`d06e3ad0 : PathOfExileSteam+0x116653e
02 000000d7`407fd450 00007ff6`cd59679b : 00000000`00000010 0000051b`6f554480 0000051b`6f554510 00000000`00000058 : PathOfExileSteam+0x117b018
03 000000d7`407feb40 00007ff6`cd59aead : 00007ff6`d06e3bc0 000000d7`407ff498 00007ff6`d06e3ad0 0000051b`2e3bad18 : PathOfExileSteam+0x107679b
04 000000d7`407ff140 00007ff6`cd59d179 : 000000d7`407ff4f0 00000000`00000000 000000d7`407ff938 00000000`00000000 : PathOfExileSteam+0x107aead
05 000000d7`407ff490 00007ff6`cd3af3a6 : 00007ff6`d06e3ad0 0000051a`dc1e01c0 00000000`00000000 00000000`00000000 : PathOfExileSteam+0x107d179
06 000000d7`407ff900 00007ff6`cd3b0851 : 0000051a`dc1e0a10 00000000`00000000 00000000`00000000 00007ff6`cd3ad4f8 : PathOfExileSteam+0xe8f3a6
07 000000d7`407ff990 00007ff6`cd3ad50e : 0000051a`dc1e09c0 00000000`00000000 00000000`00000000 00000000`00000000 : PathOfExileSteam+0xe90851
08 000000d7`407ff9c0 00007ff6`cc711e76 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : PathOfExileSteam+0xe8d50e
09 000000d7`407ffa10 00007ff6`cc711801 : 0000051a`dc14d220 00000000`00000000 00000000`00000000 00000000`00000000 : PathOfExileSteam+0x1f1e76
0a 000000d7`407ffa40 00007ff6`cd3b1079 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : PathOfExileSteam+0x1f1801
0b 000000d7`407ffa70 00007ffb`1a0de8d7 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : PathOfExileSteam+0xe91079
0c 000000d7`407ffad0 00007ffb`1b69c34c : 00000000`00000000 00000000`00000000 000004f0`fffffb30 000004d0`fffffb30 : kernel32!BaseThreadInitThunk+0x17
0d 000000d7`407ffb00 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x2c
0:019> ln @rip
Browse module
Set bu breakpoint

0:019> u PathOfExileSteam+0x116663f-20 L40
PathOfExileSteam+0x116661f:
00007ff6`cd68661f 8d442448 lea eax,[rsp+48h]
00007ff6`cd686623 488b09 mov rcx,qword ptr [rcx]
00007ff6`cd686626 488d542440 lea rdx,[rsp+40h]
00007ff6`cd68662b 4881c120090000 add rcx,920h
00007ff6`cd686632 e8a995fdfe call PathOfExileSteam+0x13fbe0 (00007ff6`cc65fbe0)
00007ff6`cd686637 4c8b1f mov r11,qword ptr [rdi]
00007ff6`cd68663a 488b5c2440 mov rbx,qword ptr [rsp+40h]
00007ff6`cd68663f 493b9b28090000 cmp rbx,qword ptr [r11+928h]
00007ff6`cd686646 0f84cd000000 je PathOfExileSteam+0x1166719 (00007ff6`cd686719)
00007ff6`cd68664c 498b03 mov rax,qword ptr [r11]
00007ff6`cd68664f 48896c2450 mov qword ptr [rsp+50h],rbp
00007ff6`cd686654 48696b08a8000000 imul rbp,qword ptr [rbx+8],0A8h
00007ff6`cd68665c 488b5060 mov rdx,qword ptr [rax+60h]
00007ff6`cd686660 488b4708 mov rax,qword ptr [rdi+8]
00007ff6`cd686664 4803ea add rbp,rdx
00007ff6`cd686667 4889742420 mov qword ptr [rsp+20h],rsi
00007ff6`cd68666c 488bcd mov rcx,rbp
00007ff6`cd68666f 486930a8000000 imul rsi,qword ptr [rax],0A8h
00007ff6`cd686676 4803f2 add rsi,rdx
00007ff6`cd686679 488bd6 mov rdx,rsi
00007ff6`cd68667c e8dff9ffff call PathOfExileSteam+0x1166060 (00007ff6`cd686060)
00007ff6`cd686681 84c0 test al,al
00007ff6`cd686683 0f8586000000 jne PathOfExileSteam+0x116670f (00007ff6`cd68670f)
00007ff6`cd686689 448b4614 mov r8d,dword ptr [rsi+14h]
00007ff6`cd68668d 488bd5 mov rdx,rbp
00007ff6`cd686690 498bcb mov rcx,r11
00007ff6`cd686693 e878500000 call PathOfExileSteam+0x116b710 (00007ff6`cd68b710)
00007ff6`cd686698 488b07 mov rax,qword ptr [rdi]
00007ff6`cd68669b 4c694308a8000000 imul r8,qword ptr [rbx+8],0A8h
00007ff6`cd6866a3 488b08 mov rcx,qword ptr [rax]
00007ff6`cd6866a6 488b4708 mov rax,qword ptr [rdi+8]
00007ff6`cd6866aa 488b5160 mov rdx,qword ptr [rcx+60h]
00007ff6`cd6866ae 486908a8000000 imul rcx,qword ptr [rax],0A8h
00007ff6`cd6866b5 8b441114 mov eax,dword ptr [rcx+rdx+14h]
00007ff6`cd6866b9 4139441014 cmp dword ptr [r8+rdx+14h],eax
00007ff6`cd6866be 751c jne PathOfExileSteam+0x11666dc (00007ff6`cd6866dc)
00007ff6`cd6866c0 8b8c1194000000 mov ecx,dword ptr [rcx+rdx+94h]
00007ff6`cd6866c7 418b841094000000 mov eax,dword ptr [r8+rdx+94h]
00007ff6`cd6866cf 3bc8 cmp ecx,eax
00007ff6`cd6866d1 0f4cc1 cmovl eax,ecx
00007ff6`cd6866d4 4189841094000000 mov dword ptr [r8+rdx+94h],eax
00007ff6`cd6866dc 488b3f mov rdi,qword ptr [rdi]
00007ff6`cd6866df 4881c7600a0000 add rdi,0A60h
00007ff6`cd6866e6 488b4710 mov rax,qword ptr [rdi+10h]
00007ff6`cd6866ea 48394708 cmp qword ptr [rdi+8],rax
00007ff6`cd6866ee 720f jb PathOfExileSteam+0x11666ff (00007ff6`cd6866ff)
00007ff6`cd6866f0 488d5718 lea rdx,[rdi+18h]
00007ff6`cd6866f4 4533c0 xor r8d,r8d
00007ff6`cd6866f7 488bcf mov rcx,rdi
00007ff6`cd6866fa e831a1d5ff call PathOfExileSteam+0xec0830 (00007ff6`cd3e0830)
00007ff6`cd6866ff 488b4f08 mov rcx,qword ptr [rdi+8]
00007ff6`cd686703 488b4308 mov rax,qword ptr [rbx+8]
00007ff6`cd686707 488901 mov qword ptr [rcx],rax
00007ff6`cd68670a 4883470808 add qword ptr [rdi+8],8
00007ff6`cd68670f 488b6c2450 mov rbp,qword ptr [rsp+50h]
00007ff6`cd686714 488b742420 mov rsi,qword ptr [rsp+20h]
00007ff6`cd686719 4883c428 add rsp,28h
00007ff6`cd68671d 5f pop rdi
00007ff6`cd68671e 5b pop rbx
00007ff6`cd68671f c3 ret
00007ff6`cd686720 4056 push rsi
00007ff6`cd686722 4156 push r14
00007ff6`cd686724 4157 push r15
00007ff6`cd686726 4883ec50 sub rsp,50h


Note:
cmp rbx, qword ptr [r11+0x928]
mov r11, qword ptr [rdi] (a few lines earlier)

I'm not a developer, nor do I claim to be so this is from chatgpt now...hope it helps

r11 = 0x000005007364642e (garbage) → reading [r11+0x928] = 0x0000050073646d56 causes the AV.

So [rdi] was an invalid pointer (likely use-after-free/corruption). The rest of the stack is all game frames, not driver DLLs. This is a game-side bad pointer.

You also see lots of struct math (multiplying by 0xA8 and reading fields at +0x14 / +0x94), which screams “array of fixed-size structs.” The bad pointer is inside that logic, not in NVIDIA/Steam code.

Just to be sure, I have disabled as many hooks as possible to test again with a fresh reboot and file integrity just to be 100% sure that this is the issue and not a driver issue on my end.

n short - after multiple tests and alanalysing of dump files there seems to be something going on that I can't control on my end.
My GPU is now on the latest driver again and everything is up to date.
I'm done and don't know what else I can do on my end

PLS HELP MAH xD

Cheers ggg and hopefully there's some information here that helps




edit: here's a full report with what I tried and what the results where:

Path of Exile 2 Crash Report

System Environment

GPU: NVIDIA GeForce RTX 4070 Ti

Driver: 32.0.15.8115 (Game Ready 581.15)

OS: Windows 10 24H2 (Build 26100.1, ge_release)

Renderer Tested: DirectX 12, Vulkan

Overlays/Third-Party Hooks: Steam overlay disabled; NVIDIA overlays and telemetry forcibly killed during clean test runs.

Crash #1 (PathOfExileSteam.exe.2924.dmp)

Exception: 0xc0000005 (Access Violation – Invalid Pointer Read)

Faulting Module: PathOfExileSteam.exe

IP Offset: 0x116663f

Details: Game attempted to dereference invalid pointer at 0x0000050073646d56.

Conclusion: Game-side memory access violation.

Crash #2 (PathOfExileSteam.exe.1592.dmp)

Exception: 0xc0000005 (Access Violation – Software NX Fault, Invalid Pointer Execute)

Faulting Module: nvwgf2umx.dll (NVIDIA D3D12 User-Mode Driver)

IP: 0x7fff0f93f325

Details: Attempted execution of non-executable memory region inside NVIDIA driver thunk.

Conclusion: Driver-related crash under DirectX 12.

Crash #3 (PathOfExileSteam.exe.5340.dmp)

Exception: 0xe0000001 (Game-raised exception via RaiseException)

Faulting Module: KERNELBASE.dll, triggered from PathOfExileSteam.exe+0x28803ef

Details: Stack shows deliberate RaiseException with custom code 0xe0000001, likely an internal game assert/fatal error.

Conclusion: Game itself invoked a fatal termination.

Common Factors

Crashes occur both on Vulkan and DirectX 12.

Crashes involve both game-side access violations and NVIDIA driver faults.

Even under a “clean-room” run (no overlays, telemetry, or injected DLLs) crashes persist.

Dumps show frequent unloading/reloading of NVIDIA modules (nvwgf2umx, nvgpucomp64, sl_*, telemetry DLLs).