Wasmtime fixed a silent overflow and a bad jump target that let a hostile module escape its sandbox, one of…