CVE-2021-3720: Lenovo Legion PHONE2 Pro (l70081) Firmware

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro (L79031) and Legion Phone2 Pro (L70081) that could allow other applications to access device GPS data.

Affected products

• Lenovo Legion PHONE2 Pro (l70081) Firmware: before 12.5.632 (fixed in 12.5.632)
• Lenovo Legion Phone Pro (l79031)firmware: before 12.5.231 (fixed in 12.5.231)

Published 2021-11-12. Last modified 2026-06-17.