This vulnerability, tracked as CVE-2026-3291, affects the Samsung Print Service Plugin for Android by HP, Inc. It is categorized under CWE-926, indicating improper export of application components. This improper export can potentially expose sensitive information when the application is outdated. The CVSS 4.0 base score is 6.9, reflecting a medium severity with local attack vector and high impact on confidentiality. The vulnerability does not require privileges or user interaction to be exploited. No official fix or patch has been documented yet.

The vulnerability could lead to information disclosure on affected Android devices running outdated versions of the Samsung Print Service Plugin. The impact is limited to confidentiality, with no reported impact on integrity or availability. Since the attack vector is local, exploitation requires access to the device. There are no known active exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. HP has indicated that updates are being released to mitigate these vulnerabilities, so users should monitor for official updates and apply them promptly once available. Until then, avoid using outdated versions of the Samsung Print Service Plugin to reduce risk.