#OpenBSD pf is not affected by the recent FreeBSD security advisory (FreeBSD-SA-23:10\.pf).

"This behavior seems to be present since 2013 when I added support for atomic fragments to pf. The relevant code is in OpenBSD pf_walk_header6() in pf.c. There a bunch of sanity checks are done for the IPv6 header chain resulting in packet drops. This function does not exist in FreeBSD."

https://marc.info/?l=oss-security&m=169421136326060&w=2