In media service, there is a missing permission check. This could lead to local denial of service in media service.
CWE-787, CWE-787