The Samsung Print Service Plugin for Android contains a flaw that can let an attacker read sensitive data when the plugin is outdated. The weakness is CWE-926, an information exposure through displayed data vulnerability that can expose confidential information stored or transmitted by the app.

The issue affects older installations of the Samsung Print Service Plugin distributed by HP, Inc. for Android devices. No specific version numbers are given, but any plugin version published before the latest HP update is susceptible.

The CVSS score of 6.9 indicates a moderate risk. EPSS is not available, so the probability of exploitation is uncertain, and the vulnerability is not listed in CISA KEV. The likely attack vector appears to be local to a user’s device, requiring the outdated plugin to be installed. An attacker could leverage the plugin’s exposed data paths to extract information from the device.