At a glance, it looks like it exploits a bug in WebKit's JavaScriptCore JavaScript engine.

Does the PS5's WebKit use JavaScriptCore with JIT enabled? Have to wonder if Sony will respond by disabled its JIT, to narrow the attack surface.