Lenovo · Legion Phone2 Pro · CVE-2021-3720
**Name of the Vulnerable Software and Affected Versions**
Legion Phone Pro version L79031
Legion Phone2 Pro version L70081
**Description**
An information disclosure issue was reported in the Time Weather system widget that could allow other applications to access device GPS data.
**Recommendations**
For Legion Phone Pro version L79031, consider restricting access to the Time Weather system widget until a fix is available.
For Legion Phone2 Pro version L70081, consider restricting access to the Time Weather system widget until a fix is available.
As a temporary workaround, consider disabling the Time Weather system widget to minimize the risk of exploitation.