FreeRDP versions from 3.17.0 up to but not including 3.32.2 contain an assertion failure vulnerability in the RemoteFX differential decoder when verbose WinPR assertions are enabled. This flaw can be triggered by a malicious RDP server sending a specially crafted RemoteFX tile with adjacent LL3 coefficients summing beyond the signed 16-bit range, causing the client process to abort.