FreeRDP versions from 3.0.0-beta1 up to but not including 3.32.0 contain a vulnerability in the proxy component where cumulative or absolute size limits are not enforced when reassembling RDPDR channel fragments. This allows an attacker to send a FIRST fragment followed by continuation fragments without a LAST fragment, causing the proxy to allocate growing per-session heap streams proportional to traffic, which can exhaust proxy memory and cause denial of service.