Skip to content
OpenAdvisories
Medium · 5.1 CVE-2026-24795 EUVD-2026-4720GHSA-mq76-p4g2-27qg

An Out-of-bounds Write in CloverHackyColor/CloverBootloader

Published Jan 27, 2026 · Updated Jan 27, 2026 · Assigned by GovTech CSG

Description

Out-of-bounds Write vulnerability in CloverHackyColor CloverBootloader (MdeModulePkg/Universal/RegularExpressionDxe/Oniguruma modules). This vulnerability is associated with program files regcomp.C.

This issue affects CloverBootloader: before 5162.

Affected products

VendorProductAffectedFixed
CloverHackyColor CloverBootloader — —

References