FreeRDP versions before 3.32.0 contain a vulnerability where prior serial handles are not closed properly in the serial_process_irp_create function. This flaw allows a malicious RDP server to exhaust file descriptors by sending repeated serial IRP_MJ_CREATE requests, potentially causing the client to terminate due to a file descriptor assertion failure.