heap out-of-bounds vulnerability