Samsung Print Service Plugin – Potential Information Disclosure
Priority LOW 29CWE-926Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
Samsung Print Service Plugin for Android is potentially vulnerable to information disclosure when using an outdated version of the application via mobile devices. HP is releasing updates to mitigate these potential vulnerabilities.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00096 0th percentileScored 2026-11-07
Fix Fixed Samsung Print Service Plugin (HP, Inc): <3.12.260420
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Hewlett Packard Enterprise | Samsung Print Service Plugin | before <3.12.260420 | <3.12.260420 | Patch available | CNA |
- Samsung Print Service Plugin VendorHewlett Packard Enterprise Affected before <3.12.260420 Fixed in <3.12.260420 Patch available CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:hp:samsung_print_service_plugin:*:*:*:*:*:android:*:* | before 3.12.260420 | Vulnerable | Hewlett Packard Enterprise |
- cpe:2.3:a:hp:samsung_print_service_plugin:*:*:*:*:*:android:*:* Versions before 3.12.260420 Vulnerable ·Hewlett Packard Enterprise
Remediation
- Fix · CNA Samsung Print Service Plugin (HP, Inc) Fixed in <3.12.260420
Timeline
- 2026-10-02 Threatist record created from CVE-2026-3291
- 2026-10-03 Alias added: GHSA-j5hx-w4cq-6522
References
Sources
- CVE-2026-3291 · CVE Program
- CVE-2026-3291 · NVD
- FIRST EPSS
- GHSA-j5hx-w4cq-6522 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences