CVE-2024-33660

An exploit is possible where an actor with physical access can manipulate SPI flash without being detected...