CVE-2024-42642

6.7 mediumEPSS 0.5%

Medium (6.7) in crucial mx500 firmware. EPSS 0.5% chance of exploitation in the next 30 days.

Micron Crucial MX500 Series Solid State Drives M3CR046 is vulnerable to Buffer Overflow, which can be triggered by sending specially crafted ATA packets from the host to the drive controller. NOTE: The supplier states that this vulnerability was fully remediated in December 2024 and that updated firmware is available through Crucial’s official support page.

Severity

CVSS 3.1

6.7 medium

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
CWEs: CWE-787, CWE-120
Published: 2024-09-04
Modified: 2026-07-05
Record from: the NVD, synced 2026-10-19

Affected

crucial:mx500_firmware

References

https://github.com/VL4DR/CVE-2024-42642/tree/main
https://www.crucial.com/support/ssd-support/mx500-support

Check your stack JSON