5.5
Medium
CVE-2021-3720 An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro (L79031)…
Description
An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro (L79031) and Legion Phone2 Pro (L70081) that could allow other applications to access device GPS data.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Legion Phone Pro (L79031) 12.5 | earliest → < 12.5.231 | 12.5.231 |
| Legion Phone2 Pro (L70081) 12.5 | earliest → < 12.5.632 | 12.5.632 |