CVE-2023-40216: OpenBSD

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

OpenBSD 7.3 before errata 014 is missing an argument-count bounds check in console terminal emulation. This could cause incorrect memory access and a kernel crash after receiving crafted DCS or CSI terminal escape sequences.

Affected products

• OpenBSD OpenBSD: version 7.3 only

Published 2023-08-10. Last modified 2026-06-17.