There are multiple techniques that might be used (and countermeasures that might have to be bypassed) but these links should get you started - https://stackove

There are multiple techniques that might be used (and countermeasures that might have to be bypassed) but these links should get you started - https://stackoverflow.com/questions/14760587/how-does-a-nop-sled-work https://stackoverflow.com/questions/14760587/how-does-a-nop-... https://stackoverflow.com/questions/49620893/return-into-libc-attack https://stackoverflow.com/questions/49620893/return-into-lib... And yes, arbitrary code execution is a common goal of these exploits, though it may not always be possible--sometimes you only get a DoS attack or such.