Isn't it often combined with poor bounds checks to be exploitable? It's not as if rust or VM based languages don't help a lot with this