FreeRDP versions before 3.29.0 contain a vulnerability in the http_response_recv_body() function that fails to enforce the RESPONSE_SIZE_LIMIT when processing Transfer-Encoding: chunked HTTP responses. This flaw allows attackers who control a malicious RD Gateway endpoint to send oversized chunked response bodies to clients. The client-side size limit is bypassed entirely when chunked transfer encoding is used, leading to uncontrolled memory consumption. The impact is a denial-of-service condition through client memory resource exhaustion. Users and organizations relying on FreeRDP for Remote Desktop Gateway connectivity are at risk if they connect to untrusted or compromised RD Gateway servers. The fix is available in FreeRDP 3.29.0 and users are advised to upgrade immediately.