“Careful manipulation of heap structure and can cause further heap metadata approach memory corruption ultimately leading to code execution less than attacker control.” This may make you examine (and generate to memory) more bytes than your app expected. And, visualize, inside your app there could well be any command to leap to situation NNNN