A flaw found for the AMD CPU. Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of service or privilege escalation.

Reference:
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7009.html