{"id":"CVE-2024-42642","aliases":["EUVD-2024-39736","GHSA-fxwr-6hqv-m4wv"],"status":"published","title":"Micron Crucial MX500 Series Solid State Drives M3CR046 is vulnerable to Buffer Overflow, which...","description":"Micron Crucial MX500 Series Solid State Drives M3CR046 is vulnerable to Buffer Overflow, which can be triggered by sending specially crafted ATA packets from the host to the drive controller. NOTE: The supplier states that this vulnerability was fully remediated in December 2024 and that updated firmware is available through Crucial’s official support page.","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.0049,"percentile":0.42607,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-120","CWE-121","CWE-787"],"published":"2024-09-04T00:00:00Z","modified":"2026-07-05T02:16:47Z","exploits":[{"source":"pocgithub","id":"VL4DR/CVE-2024-42642","title":"VL4DR/CVE-2024-42642","date":"2024-08-30","url":"https://github.com/VL4DR/CVE-2024-42642"}],"products":[{"vendor":"crucial","product":"mx500_firmware"}],"references":[{"url":"https://github.com/VL4DR/CVE-2024-42642/tree/main","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.crucial.com/support/ssd-support/mx500-support"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-42642"},{"url":"http://microncrucial.com"},{"url":"https://github.com/advisories/GHSA-fxwr-6hqv-m4wv"}],"sources":{"cve":[{"id":"CVE-2024-42642","description":"Micron Crucial MX500 Series Solid State Drives M3CR046 is vulnerable to Buffer Overflow, which can be triggered by sending specially crafted ATA packets from the host to the drive controller. NOTE: The supplier states that this vulnerability was fully remediated in December 2024 and that updated firmware is available through Crucial’s official support page.","status":"published","published":"2024-09-04T00:00:00Z","modified":"2026-07-05T01:28:25.365Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:34:03.333404Z"}],"euvd":[{"id":"EUVD-2024-39736","description":"Micron Crucial MX500 Series Solid State Drives M3CR046 is vulnerable to Buffer Overflow, which can be triggered by sending specially crafted ATA packets from the host to the drive controller. NOTE: The supplier states that this vulnerability was fully remediated in December 2024 and that updated firmware is available through Crucial’s official support page.","status":"published","published":"2024-09-04T00:00:00Z","modified":"2026-07-05T01:28:25Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T18:20:14.793418Z"}],"ghsa":[{"id":"GHSA-fxwr-6hqv-m4wv","title":"Micron Crucial MX500 Series Solid State Drives M3CR046 is vulnerable to Buffer Overflow, which...","description":"Micron Crucial MX500 Series Solid State Drives M3CR046 is vulnerable to Buffer Overflow, which can be triggered by sending specially crafted ATA packets from the host to the drive controller.","status":"published","published":"2024-09-04T21:30:32Z","modified":"2026-02-05T15:31:07Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-120","CWE-121","CWE-787"],"updated_at":"2026-11-02T15:06:03.410025Z"}],"nvd":[{"id":"CVE-2024-42642","description":"Micron Crucial MX500 Series Solid State Drives M3CR046 is vulnerable to Buffer Overflow, which can be triggered by sending specially crafted ATA packets from the host to the drive controller. NOTE: The supplier states that this vulnerability was fully remediated in December 2024 and that updated firmware is available through Crucial’s official support page.","status":"published","published":"2024-09-04T20:15:07.007Z","modified":"2026-07-05T02:16:47.49Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-787","CWE-120"],"updated_at":"2026-11-02T14:10:24.514378Z"}]}}