libmaxminddb before 1.4.3 has a heap-based buffer over-read in dumpentrydata_list in maxminddb.c (CVE-2020-28241).