diff --git a/programs/ssl/ssl_client2.c b/programs/ssl/ssl_client2.c
index 061096b..9b69b17 100644
--- a/programs/ssl/ssl_client2.c
+++ b/programs/ssl/ssl_client2.c
@@ -2518,6 +2518,7 @@
                                                  opt.exp_label, strlen(opt.exp_label),
                                                  NULL, 0, 0);
         if (ret != 0) {
+            mbedtls_free(exported_key);
             goto exit;
         }
         mbedtls_printf("Exporting key of length %d with label \"%s\": 0x",
@@ -2528,6 +2529,7 @@
         }
         mbedtls_printf("\n\n");
         fflush(stdout);
+        mbedtls_free(exported_key);
     }
 #endif /* defined(MBEDTLS_SSL_KEYING_MATERIAL_EXPORT) */