Wasmtime (< 36.0.18, >= 37.0.0 < 48.0.6, >= 49.0.0 < 49.0.3)

Wasmtime versions prior to 48.0.4 and 49.0.2 are vulnerable to a stack buffer overflow allowing sandbox escape or host crashes via unvalidated async callback result types.