The Webkit bug used is well known and not new https://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2016-4657

It's really Nintendo's fault for shipping an insecure version of Webkit.