Medium severity5.5NVD Advisory· Published Nov 12, 2021· Updated Jun 17, 2026

CVE-2021-3720

Description

An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro (L79031) and Legion Phone2 Pro (L70081) that could allow other applications to access device GPS data.

Affected products

Lenovo/Legion Phone Procpe-rescue3 versions
unspecified+ 2 more
- (no CPE)range: unspecified
- (no CPE)range: unspecified
- (no CPE)
Lenovo/Legion Phone Pro \(l79031\)firmware
cpe:2.3:o:lenovo:legion_phone_pro_\(l79031\)firmware:*:*:*:*:*:*:*:*
Range: <12.5.231
Lenovo/Legion Phone2 Pro \(l70081\) Firmware
cpe:2.3:o:lenovo:legion_phone2_pro_\(l70081\)_firmware:*:*:*:*:*:*:*:*
Range: <12.5.632

Patches

Vulnerability mechanics

References

iknow.lenovo.com.cn/detail/dc_199217.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000