A tiny heap overwrite is exactly where allocator state and boring setup details decide whether the story has teeth. The retained material only preserves metadata and prior generated notes for an OffensiveCon heap-overflow talk, so the useful click is the discipline of not letting an RCE-shaped tag outrun the missing repro.