On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor component.
Affected Platforms
Amperecomputing Ampere AltraAmperecomputing Ampere Altra FirmwareAmperecomputing Ampere Altra Max FirmwareAmperecomputing Ampere Altra Max