Launchpad.net

CVE 2020-28241

libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c.

See the CVE page on Mitre.org for more details.