Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC).
{
"cpe": "cpe:2.3:a:heimdal_project:heimdal:*:*:*:*:*:*:*:*",
"source": "CPE_FIELD",
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "7.7.1"
}
]
}"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-44640.json"
"2026-04-12T04:17:55Z"
[
{
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"185684756605390238103334007784352789624",
"7131579695216385856922531758292910060",
"96067565823201056646313325968740529266",
"307324062224806380958204996069287421659"
],
"threshold": 0.9
},
"target": {
"file": "include/bits.c"
},
"source": "https://github.com/heimdal/heimdal/commit/78077c39e355766221383ee48c8b9be0459a82a4",
"signature_version": "v1",
"id": "CVE-2022-44640-7e74d481"
}
]
{
"cpe": "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
"source": "CPE_FIELD",
"extracted_events": [
{
"introduced": "4.15.0"
},
{
"fixed": "4.15.3"
},
{
"introduced": "4.16.0"
},
{
"fixed": "4.16.8"
},
{
"introduced": "4.17.0"
},
{
"fixed": "4.17.4"
}
]
}