FreeRDP versions 3.0.0 through 3.32.1 built with the WITH_AAD=ON option contain a reachable assertion in the ARM gateway response parser. The parser accepts a missing or non‑string redirectedServerCert field and forwards a null buffer to the certificate parser, triggering an assertion that aborts the client process. The result is a client crash that denies the user service.

The vulnerability applies to FreeRDP, versions 3.0.0 to 3.32.1 that enable the AAD feature. Patch releases 3.32.2 and later resolve the issue.

The CVSS score of 5.3 indicates moderate severity, and the EPSS score is not available. The vulnerability is not listed in CISA KEV. An attacker can exploit the flaw by providing a malformed ARM gateway response with a missing or invalid redirectedServerCert field; any FreeRDP client connecting through such a gateway will crash, resulting in denial of service.