CVE-2022-44640: Heimdal Project Heimdal

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC).

Affected products

• Heimdal Project Heimdal: before 7.7.1 (fixed in 7.7.1)
• Samba Samba: from 4.15.0, before 4.15.3 (fixed in 4.15.3); from 4.16.0, before 4.16.8 (fixed in 4.16.8); from 4.17.0, before 4.17.4 (fixed in 4.17.4)

Published 2022-12-25. Last modified 2026-06-17.