Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159.