"Uninitialized value was created by a heap deallocation", it may be use-after-free. Setting High severity then.

This issue is a security regression. If you are not able to fix this quickly, please revert the change that introduced it.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

ClusterFuzz is analyzing your testcase. Developers can follow the progress at https://cluster-fuzz.appspot.com/testcase?key=4608462243233792

Looks like this is caused by https://pdfium.googlesource.com/pdfium.git/+/cd1e9ff4f432cbc29ed279e6891fb7ddc2ea3734

Looks like the cause is the same as  bug 610973 

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4608462243233792

Uploader: ochang@google.com
Job Type: linux_asan_pdfium
Platform Id: linux

Crash Type: Heap-use-after-free READ 8
Crash Address: 0x60b0000074c8
Crash State:
  CPDF_Document::FindPDFPage
  CPDF_Document::FindPDFPage
  CPDF_Document::GetPage
  
Recommended Security Severity: High

Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_pdfium&range=392347:392426

Minimized Testcase (0.17 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv97Jv1i-mZLatBnG888rJi3Sv2XaTO-EEOyKZObF02Cc0TdlJRDou5pDYepWqFkNxoRVgR4V8VbGSPRuWl92F2-az6IzivLUKhoniuqEY2vheUIt9Dg3imMgguBdCDKosEBZGADokR6ZeSiBGz4qekw1h40E6A
<<sartxref 0/Prev 1%PDF-0/3
1 0 obj 
<<
/Pages 2 0 R
>>ne
2 0 obj 
<<
/Type /XRef
/Kids [1 0 R%PDF-1.2
<<
/Kids [2 0 R]
/Count 48/TWSnt 80
endobj 
>>
trailer
<<
/Root 1 0 R
>>


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

ClusterFuzz has detected this issue as fixed in range 393183:393193.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4608462243233792

Uploader: ochang@google.com
Job Type: linux_asan_pdfium
Platform Id: linux

Crash Type: Heap-use-after-free READ 8
Crash Address: 0x60b0000074c8
Crash State:
  CPDF_Document::FindPDFPage
  CPDF_Document::FindPDFPage
  CPDF_Document::GetPage
  
Recommended Security Severity: High

Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_pdfium&range=392347:392426
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_pdfium&range=393183:393193

Minimized Testcase (0.17 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv97Jv1i-mZLatBnG888rJi3Sv2XaTO-EEOyKZObF02Cc0TdlJRDou5pDYepWqFkNxoRVgR4V8VbGSPRuWl92F2-az6IzivLUKhoniuqEY2vheUIt9Dg3imMgguBdCDKosEBZGADokR6ZeSiBGz4qekw1h40E6A
<<sartxref 0/Prev 1%PDF-0/3
1 0 obj 
<<
/Pages 2 0 R
>>ne
2 0 obj 
<<
/Type /XRef
/Kids [1 0 R%PDF-1.2
<<
/Kids [2 0 R]
/Count 48/TWSnt 80
endobj 
>>
trailer
<<
/Root 1 0 R
>>


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz has detected this issue as fixed in range 392626:393388.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6598251972657152

Fuzzer: libfuzzer_pdfium_fuzzer
Job Type: libfuzzer_chrome_msan
Platform Id: linux

Crash Type: Use-of-uninitialized-value
Crash Address: 
Crash State:
  CPDF_Document::FindPDFPage
  CPDF_Document::FindPDFPage
  CPDF_Document::GetPage
  
Recommended Security Severity: Medium

Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_msan&range=391019:391082
Fixed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_msan&range=392626:393388

Minimized Testcase (0.24 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv96-rvSYpYBqq2I5PIPVQk-KjKg4DO-RvsIiWLBcoMU51wDE3y7RXWafZPI04NbloIX3Bm6azi4ibbPJixC_qNFoZIg8GDAVHDsPo_vscerHHrL_RqSG1E4WbaWyTZFRxlzRlICM9PMTQqOVIuGlAUUXRNQ8WA
<<sartxref 0/Prev 1%PDF-0/3
1 0 obj 
<<
/Groupj
<<
>>H%PD-1.2
/Pages 2 0 R
>>ne
dobj 
2 0 obj 
<<
/Reso []
/Type /XRef
1 0 obj 
/Kids [1 0 R%PDF-1.2
<<
1<sart 0 obj 
/Kids [2 0 R]
/Count 48/TWSnt 80
endobj 
>>
trailer
<<
/I�fo 3 R 
/Root 1 0 R
>>


See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot