CVE-2021-3720

State: Published
Severity: 5.5 Medium
Published: Nov 12, 2021
Updated: Aug 3, 2024
Reserved: Aug 18, 2021

Description

An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro (L79031) and Legion Phone2 Pro (L70081) that could allow other applications to access device GPS data.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	lenovo

Weaknesses

CWE-276 Incorrect Default Permissions

Affected Products

Product	Versions
Legion Phone Pro (L79031)Lenovo	before 12.5.231Affected
Legion Phone2 Pro (L70081)Lenovo	before 12.5.632Affected

References

https://iknow.lenovo.com.cn/detail/dc_199217.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.