diff --git a/src/internal.c b/src/internal.c
index dc57df024..8ded80642 100644
--- a/src/internal.c
+++ b/src/internal.c
@@ -27563,6 +27563,8 @@ static int DoSessionTicket(WOLFSSL* ssl, const byte* input, word32* inOutIdx,
         }
 #endif
 #ifdef WOLFSSL_DTLS
+        wc_HmacFree(&cookieHmac);
+
         if (ret == 0 && ssl->options.dtls)
             DtlsMsgPoolReset(ssl);
 #endif