CVEvulnerability

CVE-2021-3720

5.5 MEDIUM Published 2021-11-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-11-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-276

Description

An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro (L79031) and Legion Phone2 Pro (L70081) that could allow other applications to access device GPS data.

Affected configurations

• lenovo legion phone pro \(l79031\)firmware (< 12.5.231) • lenovo legion phone2 pro \(l70081\) firmware (< 12.5.632)

Related

Weakness · CWE (1)

  • CWE-276 Incorrect Default Permissions weakness

References