None really.

Exploiting this requires a client that sends a malicious Heartbeat packet with a large payload size.

This is unlikely to have happened in the past without any malice.