The vulnerability CVE-2026-3291 affects the Samsung Print Service Plugin for Android by HP, Inc. It is categorized under CWE-926, which concerns improper export of application components. This flaw can potentially allow unauthorized information disclosure if an outdated version of the plugin is used on mobile devices. The CVSS 4.0 vector indicates the attack requires local access with low complexity and no privileges or user interaction, but results in high confidentiality impact. No official patch or remediation level is currently documented in the vendor advisory or CVE data. HP is reportedly releasing updates to address this issue.

The vulnerability may allow an attacker with local access to an affected Android device to gain unauthorized access to sensitive information due to improper export of application components. The impact is limited to confidentiality and does not affect integrity or availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. HP is releasing updates to mitigate this vulnerability, so users should monitor HP's official channels for updates and apply them once available. Until a patch is applied, avoid using outdated versions of the Samsung Print Service Plugin on Android devices.