CloverHackyColor CloverBootloader CVE-2026-24796

Out-of-bounds Read (CWE-125)

2026-01-27 cve_disclosure@tech.gov.sg

Buffer Overflow Information Disclosure

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Jan 27, 2026 - 09:15 nvd

N/A

DescriptionCVE.org

Out-of-bounds Read vulnerability in CloverHackyColor CloverBootloader (MdeModulePkg/Universal/RegularExpressionDxe/Oniguruma modules). This vulnerability is associated with program files regparse.C.

This issue affects CloverBootloader: before 5162.

AnalysisAI

Out-of-bounds Read vulnerability in CloverHackyColor CloverBootloader (MdeModulePkg/Universal/RegularExpressionDxe/Oniguruma modules). This vulnerability is associated with program files regparse.C.

Technical ContextAI

Classified as CWE-125 (Out-of-bounds Read). Out-of-bounds Read vulnerability in CloverHackyColor CloverBootloader (MdeModulePkg/Universal/RegularExpressionDxe/Oniguruma modules). This vulnerability is associated with program files regparse.C.

This issue affects CloverBootloader: before 5162.

Affected ProductsAI

Out-of-bounds Read vulnerability in CloverHackyColor CloverBootloader (MdeModulePkg/Universal/RegularExpressionDxe/Oniguruma modules). This vulnerabil