Android build crashes with memcpy()

The number of reports from Google Play Console has increased.
It looks like it’s crashing with memcpy, do you know what it is?

Cocos Creator: 2.4.4
Android: 7 - 11

signal 11 (SIGSEGV), code 1 (SEGV_MAPERR)
memcpy

backtrace:
#00 pc 000000000001df98 /system/lib64/libc.so (memcpy+232)
#00 pc 00000000001d0cb4 /system/vendor/lib64/egl/libGLESv2_adreno.so (EsxVertexArrayObject::UpdateInternalVbos(EsxDrawDescriptor const*, unsigned int, EsxAttributeDesc const*)+1644)
#00 pc 000000000033738c /system/vendor/lib64/egl/libGLESv2_adreno.so (A5xVertexArrayObject::CalcVfdRegs(EsxDrawDescriptor const*, A5xVfdRegs*, int)+892)
#00 pc 000000000034fdec /system/vendor/lib64/egl/libGLESv2_adreno.so (A5xContext::ValidateState(EsxDrawDescriptor const*)+1212)
#00 pc 000000000033c6b8 /system/vendor/lib64/egl/libGLESv2_adreno.so (A5xContext::HwValidateGfxState(EsxDrawDescriptor const*)+16)
#00 pc 00000000001150b8 /system/vendor/lib64/egl/libGLESv2_adreno.so (EsxContext::ValidateGfxState(EsxDrawDescriptor const*)+1968)
#00 pc 000000000010c5a4 /system/vendor/lib64/egl/libGLESv2_adreno.so (EsxContext::DrawElementsInstanced(EsxPrimType, unsigned int, EsxPixType, void const*, unsigned int, int)+972)
#00 pc 0000000000717668 /data/app/jp.coffeebreakin.app.minifarm-Po350rmEmBk7wxQefSa4Rw==/split_config.arm64_v8a.apk!lib/arm64-v8a/libcocos2djs.so (offset 0x1000) (cocos2d::renderer::DeviceGraphics::draw(unsigned long, int)+748)
#00 pc 000000000071f558 /data/app/jp.coffeebreakin.app.minifarm-Po350rmEmBk7wxQefSa4Rw==/split_config.arm64_v8a.apk!lib/arm64-v8a/libcocos2djs.so (offset 0x1000) (cocos2d::renderer::BaseRenderer::draw(cocos2d::renderer::BaseRenderer::StageItem const&)+200)
#00 pc 000000000072e81c /data/app/jp.coffeebreakin.app.minifarm-Po350rmEmBk7wxQefSa4Rw==/split_config.arm64_v8a.apk!lib/arm64-v8a/libcocos2djs.so (offset 0x1000) (cocos2d::renderer::ForwardRenderer::drawItems(std::__ndk1::vector<cocos2d::renderer::BaseRenderer::StageItem, std::__ndk1::allocatorcocos2d::renderer::BaseRenderer::StageItem> const&)+260)
#00 pc 000000000071f02c /data/app/jp.coffeebreakin.app.minifarm-Po350rmEmBk7wxQefSa4Rw==/split_config.arm64_v8a.apk!lib/arm64-v8a/libcocos2djs.so (offset 0x1000) (cocos2d::renderer::BaseRenderer::render(cocos2d::renderer::View const&, cocos2d::renderer::Scene const*)+1312)
#00 pc 000000000072d650 /data/app/jp.coffeebreakin.app.minifarm-Po350rmEmBk7wxQefSa4Rw==/split_config.arm64_v8a.apk!lib/arm64-v8a/libcocos2djs.so (offset 0x1000) (cocos2d::renderer::ForwardRenderer::render(cocos2d::renderer::Scene*, float)+292)
#00 pc 00000000006ab370 /data/app/jp.coffeebreakin.app.minifarm-Po350rmEmBk7wxQefSa4Rw==/split_config.arm64_v8a.apk!lib/arm64-v8a/libcocos2djs.so (offset 0x1000) (cocos2d::renderer::RenderFlow::render(cocos2d::renderer::NodeProxy*, float, cocos2d::renderer::Camera*)+572)
#00 pc 00000000006db960 /data/app/jp.coffeebreakin.app.minifarm-Po350rmEmBk7wxQefSa4Rw==/split_config.arm64_v8a.apk!lib/arm64-v8a/libcocos2djs.so (offset 0x1000) (js_renderer_RenderFlow_renderRegistry(v8::FunctionCallbackInfov8::Value const&)+640)
#00 pc 0000000000d8aab4 /data/app/jp.coffeebreakin.app.minifarm-Po350rmEmBk7wxQefSa4Rw==/split_config.arm64_v8a.apk!lib/arm64-v8a/libcocos2djs.so (offset 0x1000)

over 100 users.
Samsung Galaxy S8
Samsung Galaxy S9
Samsung Galaxy S10
Samsung Galaxy S20 5G
Sony Xperia 1 II
Sony Xperia 5
Sony Xperia XZ Premium
Sony Xperia XZ1 Compact
Sharp AQUOS sense3 basic
Sharp AQUOS sense4 plus
LGE V30+
Fujitsu arrows RX
Kyocera URBANO V04
Oppo Reno3 A
etc…