Last Modified: Sep 12, 2026
Affected Product(s):
BIG-IP APM
Known Affected Versions:
16.1.0, 16.1.1, 16.1.2, 16.1.2.1, 16.1.2.2, 16.1.3, 16.1.3.1, 16.1.3.2, 16.1.3.3, 16.1.3.4, 16.1.3.5, 16.1.4, 16.1.4.1, 16.1.4.2, 16.1.4.3, 16.1.5, 16.1.5.1, 16.1.5.2, 16.1.6, 16.1.6.1, 17.1.0, 17.1.0.1, 17.1.0.2, 17.1.0.3, 17.1.1, 17.1.1.1, 17.1.1.2, 17.1.1.3, 17.1.1.4, 17.1.2, 17.1.2.1, 17.1.2.2, 17.1.3, 17.1.3.1, 17.1.3.2, 17.1.3.4, 17.1.3.5, 17.5.0, 17.5.1, 17.5.1.2, 17.5.1.3, 17.5.1.4, 17.5.1.5, 17.5.1.6, 17.5.1.8, 17.5.1.9, 21.0.0, 21.0.0.1, 21.0.0.2, 21.0.0.3, 21.1.0, 21.1.0.1, 21.1.0.2
Opened: Jul 24, 2026 Severity: 3-Major
The APM SAML assertion handling leaks memory when invoking Saml artifact resolve request. The leak occurs because the CURL header list created with curl_slist_append is not freed properly and repeated invocations can cause incremental memory consumption.
Progressive memory consumption on the BIG-IP system may lead to high memory utilization and potentially affect system stability or service availability if resources become exhausted.
BIG-IP APM using SAML functionality that invokes the SAML Artifact Resolve request
None
None