diff --git a/src/ssl_ech.c b/src/ssl_ech.c
index 55844c354d8..717b7092742 100644
--- a/src/ssl_ech.c
+++ b/src/ssl_ech.c
@@ -137,6 +137,10 @@ int wolfSSL_CTX_GenerateEchConfig(WOLFSSL_CTX* ctx, const char* publicName,
 
     if (ret != 0) {
         if (newConfig) {
+            if (newConfig->receiverPrivkey != NULL) {
+                wc_HpkeFreeKey(hpke, newConfig->kemId,
+                    newConfig->receiverPrivkey, ctx->heap);
+            }
             XFREE(newConfig->cipherSuites, ctx->heap, DYNAMIC_TYPE_TMP_BUFFER);
             XFREE(newConfig->publicName, ctx->heap, DYNAMIC_TYPE_TMP_BUFFER);
             XFREE(newConfig, ctx->heap, DYNAMIC_TYPE_TMP_BUFFER);