diff --git a/src/wincng.c b/src/wincng.c
index e990af16..9a88379a 100644
--- a/src/wincng.c
+++ b/src/wincng.c
@@ -2651,6 +2651,9 @@ out:
         if(agreement) {
             BCryptDestroySecret(agreement);
         }
+
+        free(blob);
+
         if(status == STATUS_NOT_SUPPORTED &&
            _libssh2_wincng.hasAlgDHwithKDF == -1) {
             goto fb; /* fallback to RSA-based implementation */