Looks a bit similar to  bug 627414 , but probably it's a different issue.

ClusterFuzz has detected this issue as fixed in range 405299:405445.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5560782561738752

Fuzzer: libfuzzer_skia_path_fuzzer
Job Type: libfuzzer_chrome_asan
Platform Id: linux

Crash Type: Stack-buffer-overflow READ 1
Crash Address: 0x7f3eb75655d0
Crash State:
  saturated_add
  add_aa_span
  MaskSuperBlitter::blitH
  
Recommended Security Severity: Medium

Fixed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan&range=405299:405445

Minimized Testcase (0.15 Kb): https://cluster-fuzz.appspot.com/download/AMIfv95U6R6mS8AUkiGW2QZP-xmCt8HJdKH8KFaq63Z19AtJInuDZpq7mLqdaC-YABDLifmhMZFZ3Wk1-3GffEzf9MWIHQKLzr4GuDTSshWbu4CdJduEEEOpGE3NbOkF8ba2-IyC0ymUT_M_jFXCIUMCEidI-i0xZA?testcase_id=5560782561738752

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz has detected this issue as fixed in range 405299:405445.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5560782561738752

Fuzzer: libfuzzer_skia_path_fuzzer
Job Type: libfuzzer_chrome_asan
Platform Id: linux

Crash Type: Stack-buffer-overflow READ 1
Crash Address: 0x7f3eb75655d0
Crash State:
  saturated_add
  add_aa_span
  MaskSuperBlitter::blitH
  
Recommended Security Severity: Medium

Fixed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan&range=405299:405445

Minimized Testcase (0.15 Kb): https://cluster-fuzz.appspot.com/download/AMIfv95U6R6mS8AUkiGW2QZP-xmCt8HJdKH8KFaq63Z19AtJInuDZpq7mLqdaC-YABDLifmhMZFZ3Wk1-3GffEzf9MWIHQKLzr4GuDTSshWbu4CdJduEEEOpGE3NbOkF8ba2-IyC0ymUT_M_jFXCIUMCEidI-i0xZA?testcase_id=5560782561738752

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase is verified as fixed, closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot