Rémi Bernon (@rbernon) commented about dlls/comctl32/tab.c:
TAB_InvalidateTabArea(infoPtr); item = TAB_GetItem(infoPtr, iItem);
- Free(item->pszText);
- Free(item);
- free(item->pszText);
This causes a mismatched heap free, in the same way as in listview. You need to use wcsdup / strdupAW as introduced by https://gitlab.winehq.org/wine/wine/-/merge_requests/1633.