It's a use-after-free in FontFaceCache (https://wololo.net/2021/10/14/use-after-free-webkit-vulnerability-impacts-ps4-possibly-up-to-firmware-9-00-included/ htt

It's a use-after-free in FontFaceCache (https://wololo.net/2021/10/14/use-after-free-webkit-vulnerability-impacts-ps4-possibly-up-to-firmware-9-00-included/ https://wololo.net/2021/10/14/use-after-free-webkit-vulnerab... and https://github.com/Cryptogenic/PS5-4.03-Kernel-Exploit/blob/cafa1527c742118e2b7f15d71ce289aac5c3ee85/document/en/ps5/webkit.js#L27 https://github.com/Cryptogenic/PS5-4.03-Kernel-Exploit/blob/...), not a JIT bug. Funnily enough, I think the CVE they're saying it is is wrong? The link to the project zero itw tracking page is for CVE-2021-30858 which is an IndexDB UAF, which is a completely seperate bug; the MITRE tracking page for CVE-2021-30858 just has the boilerplate "a malicious page can cause an exploit" from Apple, and doesn't say if it's for the IndexDB or FontFaceCache bug, so I think the Jailbreak people are just confused on this one.