When the AV is induced, the heap is already within a susceptible point out as the copy has already overwritten all following heap blocks right until a non-mapped site was encountered. Some programs allow for for that code to execute, Many others You should not. If the application won't help it, there has to be a vulnerability current to execute.