Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption.
https://cloud.google.com/support/bulletins/index#gcp-2024-nnn
https://https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3011.html