Any security related issues should be reported by following the instructions here: https://01.org/security
Please check the following Android documentation related to HWC2 API: https://android.googlesource.com/platform/hardware/libhardware/+/master/include/hardware/hwcomposer2.h