It's a reference to this class of vulnerabilities: https://en.wikipedia.org/wiki/Return-oriented_programming