Skip to content
OpenAdvisories
Medium · 5.5 CVE-2021-3720 EUVD-2021-27000GHSA-86m9-qv63-94gq

An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro (L79031) and Legion Phone2 Pro (…

Published Nov 12, 2021 · Updated Aug 3, 2024 · Assigned by lenovo

Description

An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro (L79031) and Legion Phone2 Pro (L70081) that could allow other applications to access device GPS data.

Affected products

VendorProductAffectedFixed
Lenovo Legion Phone Pro (L79031) unspecified – < 12.5.231 12.5.231
Lenovo Legion Phone2 Pro (L70081) unspecified – < 12.5.632 12.5.632

References