Usage disclosure via device-resident traces

Information disclosure in the Butterfly Button Plugin allows physically proximate attackers to learn that domestic-violence support was accessed. The plugin writes data to the local device and leaves usage traces; the advisory does not identify the storage API or artifact type. Physical access with low privileges is required, and the exposed fact is use of the discreet reporting feature rather than report content.