I wonder if the iOS versions would have been tracked down if the researchers didn't have access to Corellium. I'm glad they did, since it sounds like a pretty nasty exploit you could trigger from almost any web page.
[1] https://developer.mozilla.org/en-US/docs/Web/HTML/Element/ma...