A heap-buffer-overflow vulnerability was identified in QEMU's megasas_map_sgl function, reported by OSS-Fuzz. The issue involves a read overflow of 4 bytes on the heap, potentially leading to memory corruption. The vulnerability affects many specific QEMU versions from 6.2.0 through 11.1.0-rc2 and later commits. No CVSS score or vendor patch information is provided. The severity is assessed as medium based on the nature of the overflow and lack of known exploits.