Thanks Quinn ;-)
I have added some .xccrashpoint files, which I retrieved from Xcode-Organizer, to FB11844108. Hope this help pointing to the culprit.
We already tried using the standard memory debugging tools, but have not yet been able to reproduce the crash. We'll continue trying...
Cheers, Andy