Looks like use-after-free ("Uninitialized value was created by a heap deallocation").

This issue is a security regression. If you are not able to fix this quickly, please revert the change that introduced it.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

ClusterFuzz has detected this issue as fixed in range 392626:393388.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4700515438428160

Fuzzer: libfuzzer_pdfium_fuzzer
Job Type: libfuzzer_chrome_msan
Platform Id: linux

Crash Type: Use-of-uninitialized-value
Crash Address: 
Crash State:
  __lower_bound<CFX_ByteString>
  std::__1::__tree_const_iterator<std::__1::__value_type<CFX_ByteString, CPDF_Obje
  find
  
Recommended Security Severity: Medium

Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_msan&range=391019:391082
Fixed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_msan&range=392626:393388

Minimized Testcase (0.26 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv96yqPkFbKUiYhnCmq2aDqoxzNgDWp1pAEpaLccBGJwxBjC2TTZQjHj07RIMdzXF7tIs-cfzL85Srlis_SJMTrp0Gmc73vBWSejUEYH-S08-RNB3pBg7Eiq7x7VuzxFzgXgtH2Cdf5-GHwdBUFofngAVKExDlQ
o>>ie/INPe%PDF!rerd'�%kdce
trai:ler<<
trailer<</Root 4 10 R[/AcroFor4 4 obj<<Z>re%QDFerd/GTS_PDensFXede;<<
traile</Pages 4 20 R[C5 1/C'ntents�'.0 0.0`0. )0.0 0.0<<//3DVie:�1<.02/3DVie:�1 0]/Flter
/Keywor(%Type'4%PDF%%PDF%PFD2.4
/Type/XRef 3>>stream
q0Q
endstream


See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot