For Chrome's VRP (which is separate from Google's patch rewards program) if the bug has already been fixed on tip-of-tree it usually wouldn't qualify. That said, if you know of a common dangerous design pattern in pdfium and would like to try to fix it, it would be in scope for the patch rewards program. You would need to land those changes before submitting for a reward through that program:

"In order to qualify, your patch must first be submitted directly to the maintainers of the project, and you must work with them to have it accepted into the repository without reverts for one month. After these prerequisites are met, please submit via our form here."

Since there's nothing actionable for us in this report, I'm going to close it out. If you do know of any other bugs in pdfium or find more in the future, please file new bugs with additional details.

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot