diff --git a/programs/ssl/ssl_client2.c b/programs/ssl/ssl_client2.c
index 228e7f8761..88c9f8c9fe 100644
--- a/programs/ssl/ssl_client2.c
+++ b/programs/ssl/ssl_client2.c
@@ -2593,6 +2593,7 @@ usage:
                                                  opt.exp_label, strlen(opt.exp_label),
                                                  NULL, 0, 0);
         if (ret != 0) {
+            mbedtls_free(exported_key);
             goto exit;
         }
         mbedtls_printf("Exporting key of length %d with label \"%s\": 0x",
@@ -2603,6 +2604,7 @@ usage:
         }
         mbedtls_printf("\n\n");
         fflush(stdout);
+        mbedtls_free(exported_key);
     }
 #endif /* defined(MBEDTLS_SSL_KEYING_MATERIAL_EXPORT) */
 
diff --git a/programs/ssl/ssl_server2.c b/programs/ssl/ssl_server2.c
index 2b81fc18ef..1a934e32d7 100644
--- a/programs/ssl/ssl_server2.c
+++ b/programs/ssl/ssl_server2.c
@@ -3675,6 +3675,7 @@ handshake:
                                                  opt.exp_label, strlen(opt.exp_label),
                                                  NULL, 0, 0);
         if (ret != 0) {
+            mbedtls_free(exported_key);
             goto exit;
         }
         mbedtls_printf("Exporting key of length %d with label \"%s\": 0x",
@@ -3685,6 +3686,7 @@ handshake:
         }
         mbedtls_printf("\n\n");
         fflush(stdout);
+        mbedtls_free(exported_key);
     }
 #endif /* defined(MBEDTLS_SSL_KEYING_MATERIAL_EXPORT) */