Wasmtime (< 36.0.19, 48.0.7, 49.0.4)

Wasmtime versions prior to 48.0.4 and 49.0.2 are vulnerable to a stack buffer overflow allowing sandbox escape or host crashes via unvalidated async callback result types.