Skip to content

CVE-2011-0180

Integer overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary (1)...

2.1 LowPublic exploit

CVE-2011-0180 is a low vulnerability (CVSS 2.1) in Apple Mac Os X, published March 23, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.68%, the 52nd percentile. No source names a fixed version.

Integer overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary (1) HFS, (2) HFS+, or (3) HFS+J files via a crafted F_READBOOTSTRAP ioctl call.

Exploit likelihood

0.68%Down 1.1 points since Feb 4, 2022

What each source reports

NVD Score used 2.1

Integer overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary (1) HFS, (2) HFS+, or (3) HFS+J files via a crafted F_READBOOTSTRAP ioctl call.

Record: CVE-2011-0180
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-189
Updated: 2026-11-02

CVE List No score

Integer overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary (1) HFS, (2) HFS+, or (3) HFS+J files via a crafted F_READBOOTSTRAP ioctl call.

Record: CVE-2011-0180
Updated: 2026-11-02

EUVDEUVD-2011-0206 No score

Integer overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary (1) HFS, (2) HFS+, or (3) HFS+J files via a crafted F_READBOOTSTRAP ioctl call.

Record: EUVD-2011-0206
Updated: 2026-11-03

GitHub AdvisoriesGHSA-ffv3-68jw-q8m7 No score

Integer overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary (1)...

Integer overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary (1) HFS, (2) HFS+, or (3) HFS+J files via a crafted F_READBOOTSTRAP ioctl call.

Record: GHSA-ffv3-68jw-q8m7
Updated: 2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Apple Mac OSX 10.6.x - HFS Subsystem Information Disclosure	2011-03-21

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD

References