diff --git a/diff/lcow/lcow.go b/diff/lcow/lcow.go
index 4c5d74ca3..344aa7eb0 100644
--- a/diff/lcow/lcow.go
+++ b/diff/lcow/lcow.go
@@ -21,6 +21,7 @@ package lcow
 import (
 	"context"
 	"io"
+	"io/ioutil"
 	"os"
 	"path"
 	"time"
@@ -163,6 +164,11 @@ func (s windowsLcowDiff) Apply(ctx context.Context, desc ocispec.Descriptor, mou
 	}
 	outFile.Close()
 
+	// Read any trailing data
+	if _, err := io.Copy(ioutil.Discard, rc); err != nil {
+		return emptyDesc, err
+	}
+
 	err = security.GrantVmGroupAccess(layerPath)
 	if err != nil {
 		return emptyDesc, errors.Wrapf(err, "failed GrantVmGroupAccess on layer vhd: %v", layerPath)