CVE-2026-24795: Cloverhackycolor Cloverbootloader

Medium severity, CVSS 5.1. EPSS: 0.1% chance of exploitation in the next 30 days.

Out-of-bounds Write vulnerability in CloverHackyColor CloverBootloader (MdeModulePkg/Universal/RegularExpressionDxe/Oniguruma modules). This vulnerability is associated with program files regcomp.C. This issue affects CloverBootloader: before 5162.

Affected products

• Cloverhackycolor Cloverbootloader

Published 2026-01-27. Last modified 2026-06-17.