Skip to content
OpenAdvisories
Medium · 6.9 CVE-2026-24796 EUVD-2026-4719GHSA-7q53-q346-xff3

A Out-of-bounds Read vulnerability in CloverHackyColor/CloverBootloader

Published Jan 27, 2026 · Updated Jan 27, 2026 · Assigned by GovTech CSG

Description

Out-of-bounds Read vulnerability in CloverHackyColor CloverBootloader (MdeModulePkg/Universal/RegularExpressionDxe/Oniguruma modules). This vulnerability is associated with program files regparse.C.

This issue affects CloverBootloader: before 5162.

Affected products

VendorProductAffectedFixed
CloverHackyColor CloverBootloader — —

References