diff --git a/wolfcrypt/src/cmac.c b/wolfcrypt/src/cmac.c
index c677f06f3..2abcdb741 100644
--- a/wolfcrypt/src/cmac.c
+++ b/wolfcrypt/src/cmac.c
@@ -249,6 +249,7 @@ int wc_CmacFinal(Cmac* cmac, byte* out, word32* outSz)
     }
 #endif
 
+    wc_AesFree(&cmac->aes);
     ForceZero(cmac, sizeof(Cmac));
 
     return ret;