Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2021-3720

An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro (L79031) and Legion Phone2 Pro (L70081) that could allow other applicatio

Description

An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro (L79031) and Legion Phone2 Pro (L70081) that could allow other applications to access device GPS data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Lenovo Legion Phone Pro (L79031)

  • unspecified to < 12.5.231affected

Lenovo Legion Phone2 Pro (L70081)

  • unspecified to < 12.5.632affected

References