diff --git a/src/file_analysis/analyzer/x509/X509Common.cc b/src/file_analysis/analyzer/x509/X509Common.cc
index 339894a94e..47c11a4d7e 100644
--- a/src/file_analysis/analyzer/x509/X509Common.cc
+++ b/src/file_analysis/analyzer/x509/X509Common.cc
@@ -209,6 +209,7 @@ void X509Common::ParseSignedCertificateTimestamps(X509_EXTENSION* ext)
 	                                                 ext_val->length);
 	if ( ! inner )
 		{
+		OPENSSL_free(ext_val_second_pointer);
 		reporter->Error(
 			"X509::ParseSignedCertificateTimestamps could not parse inner octet string");
 		return;