Out-of-bounds Read in Cloverhackycolor Cloverbootloader
CVE-2026-24796
Out-of-bounds Read vulnerability in CloverHackyColor CloverBootloader (MdeModulePkg/Universal/RegularExpressionDxe/Oniguruma modules). This vulnerability is associated with program files regparse.C. This issue affects CloverBootloader: before 5162.
Vulnerability class: Buffer Overflow
EPSS: 0.001 (2.6th percentile) — read the EPSS interpretation.
Affected products
- Cloverhackycolor Cloverbootloader — versions 0
Weakness classification (CWE)
References
- cve_disclosure@tech.gov.sg (patch)