CAPsMAN interface scan memory leak and reboot

With RouterOS 7.1 through 7.4, I see a memory leak ultimately causing reboot when performing a CAPsMAN interface scan with ‘as-value’ on a some radios, eg:

:put [/caps-man/interface/scan 5g-ap6-1 as-value]

I’m using cAP ac units with a RB5009 and see one processor core get to 100% after ~30s and memory exhaustion triggering reboot in ~60s. It occurs consistently on only 2 out of 100 radios despite stock config and netinstall, suggesting it relates to 802.11 beacon Information Element parsing and CAPsMAN encoding. The same issue doesn’t occur when performing a non-CAPsMAN/local scan.

I logged this as SUP-71018 in January 2022; does anyone else experience the same?

Thanks,
Daniel