diff --git a/validator/val_secalgo.c b/validator/val_secalgo.c
index 8f17c53e8..3dbbe9ac9 100644
--- a/validator/val_secalgo.c
+++ b/validator/val_secalgo.c
@@ -1746,6 +1746,7 @@ _verify_nettle_ecdsa(sldns_buffer* buf, unsigned int digest_size, unsigned char*
 			res &= nettle_ecdsa_verify (&pubkey, SHA256_DIGEST_SIZE, digest, &signature);
 			mpz_clear(x);
 			mpz_clear(y);
+			nettle_ecc_point_clear(&pubkey);
 			break;
 		}
 		case SHA384_DIGEST_SIZE: