CVE-2026-24796: Cloverhackycolor Cloverbootloader

Medium severity, CVSS 6.9. EPSS: 0.1% chance of exploitation in the next 30 days.

Out-of-bounds Read vulnerability in CloverHackyColor CloverBootloader (MdeModulePkg/Universal/RegularExpressionDxe/Oniguruma modules). This vulnerability is associated with program files regparse.C. This issue affects CloverBootloader: before 5162.

Affected products

• Cloverhackycolor Cloverbootloader

Published 2026-01-27. Last modified 2026-06-17.