{"id":"CVE-2023-40216","details":"OpenBSD 7.3 before errata 014 is missing an argument-count bounds check in console terminal emulation. This could cause incorrect memory access and a kernel crash after receiving crafted DCS or CSI terminal escape sequences.","modified":"2026-10-28T10:35:06.343501912Z","published":"2023-08-10T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/40xxx/CVE-2023-40216.json"},"references":[{"type":"WEB","url":"https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/014_wscons.patch.sig"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/40xxx/CVE-2023-40216.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40216"},{"type":"FIX","url":"https://github.com/openbsd/src/commit/9d3f688f46eba347e96ff0ae9506ef2061622e0c"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/openbsd/src","events":[{"introduced":"0"},{"fixed":"9d3f688f46eba347e96ff0ae9506ef2061622e0c"}],"database_specific":{"extracted_events":[{"range":[{"fixed":"9d3f688f46eba347e96ff0ae9506ef2061622e0c"}],"source":"REFERENCES_COMMIT"}]}}],"database_specific":{"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://github.com/openbsd/src/commit/9d3f688f46eba347e96ff0ae9506ef2061622e0c","target":{"function":"wsemul_vt100_output_dcs","file":"sys/dev/wscons/wsemul_vt100.c"},"deprecated":false,"digest":{"length":1056,"function_hash":"265681716838979253010581392135242680004"},"id":"CVE-2023-40216-4c31d211"},{"deprecated":false,"digest":{"function_hash":"206502500028984450597892844690305367280","length":1049},"id":"CVE-2023-40216-8e50aa10","signature_type":"Function","signature_version":"v1","source":"https://github.com/openbsd/src/commit/9d3f688f46eba347e96ff0ae9506ef2061622e0c","target":{"function":"wsemul_vt100_output_csi","file":"sys/dev/wscons/wsemul_vt100.c"}},{"deprecated":false,"digest":{"line_hashes":["155021425949536090813100109227121735115","187234648747325662831006248333391972033","13775607979908733933810120509681587934","167744353660233289814388633705958253987","147905264724343203715998043904533704574","274742491951488157614092173563918367786","61236015545058836887532517315094563449","324647215888449000830799915653001554073","284902129512608047312348912579143491608","68986312475101025598561392622441655312","166024061723577153596308476805893817894","318705250993484124143893135909824145336","206429557422792930742036730581102816520","258558781479243851821682808471627528718","187234648747325662831006248333391972033","13775607979908733933810120509681587934","99498509574741726589678080082969412541","179977086046293054421510965775254237797","53325456572491670357939113504273625937","159245415429686055729995806627125864386","94425332948742078992154321096579580243","266573870645082555025204359778722056642","284902129512608047312348912579143491608","68986312475101025598561392622441655312","166024061723577153596308476805893817894","148073721792279370700672863638867660560","86985102038696733379155161206801179551","110425008614182384580419658835841781187"],"threshold":0.9},"id":"CVE-2023-40216-b104e1a5","signature_type":"Line","signature_version":"v1","source":"https://github.com/openbsd/src/commit/9d3f688f46eba347e96ff0ae9506ef2061622e0c","target":{"file":"sys/dev/wscons/wsemul_vt100.c"}},{"id":"CVE-2023-40216-ef4e2ffb","signature_type":"Line","signature_version":"v1","source":"https://github.com/openbsd/src/commit/9d3f688f46eba347e96ff0ae9506ef2061622e0c","target":{"file":"sys/dev/wscons/wsemul_sun.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["155021425949536090813100109227121735115","187234648747325662831006248333391972033","13775607979908733933810120509681587934","167744353660233289814388633705958253987","21362856886712994574622297874235072429","191349822014321890138638086336698442021","206605479969865276143472975307842937635","320184454779710456315604648580856284857","132503500342114132007765803073904372379","193999219193586959375159477143594998439"]}},{"source":"https://github.com/openbsd/src/commit/9d3f688f46eba347e96ff0ae9506ef2061622e0c","target":{"function":"wsemul_sun_output_control","file":"sys/dev/wscons/wsemul_sun.c"},"deprecated":false,"digest":{"function_hash":"166340805736302294980083043885707168010","length":845},"id":"CVE-2023-40216-f615b0ce","signature_type":"Function","signature_version":"v1"}],"vanir_signatures_modified":"2026-10-28T10:35:06Z","source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-40216.json"}}],"schema_version":"1.9.2"}