Using Address Space Layout Randomization (ASLR) reduces the potential for which of the following attacks?

SQL injection is an input-validation attack targeting database query logic, which operates at the application/database layer and is completely unrelated to process memory address layout.

Man-in-the-middle attacks involve intercepting network communications between two parties, a network-layer threat that ASLR's memory-randomization mechanism has no bearing on.

Cross-Site Scripting is a web application vulnerability involving injection of malicious scripts into web pages viewed by other users, which is a client-side code injection issue unaffected by memory address randomization.

Heap overflow attacks rely on the attacker knowing or predicting the memory addresses of target data structures or executable code so they can redirect execution flow. ASLR randomizes the memory layout each time a process runs, meaning the attacker cannot reliably predict heap addresses, effectively mitigating exploitation of heap overflow vulnerabilities by invalidating hardcoded or guessed address payloads.