Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Mohammad_62878's avatar
Mohammad_62878
Icon for Nimbostratus rankNimbostratus
May 23, 2015

Why ASM counts the parameter length incorrectly

Good morning,   I have an ASM policy with Unicode (utf-8) as application language. I noticed that ASM multiplys the Arabic characters in the parameters by two. That means if I have a word of 7 Ara...
arabic
ASM Advanced WAF
management
security
utf-8
Erik_Novak's avatar
Erik_Novak
Icon for Employee rankEmployee
May 26, 2015

Hello Mohammad, I think ASM is working as designed here. One workaround would be to increase the max length of the offending parameter to 14--assuming you want to keep using utf-8. However, it might be worth a try to re-configure the policy using Arabic (iso-8859-6) or Arabic (windows-1256).