diff --git a/libwvdrmengine/cdm/core/src/privacy_crypto_openssl.cpp b/libwvdrmengine/cdm/core/src/privacy_crypto_openssl.cpp
index 2d304e27..eabf667d 100644
--- a/libwvdrmengine/cdm/core/src/privacy_crypto_openssl.cpp
+++ b/libwvdrmengine/cdm/core/src/privacy_crypto_openssl.cpp
@@ -29,14 +29,15 @@ RSA* GetKey(const std::string& serialized_key) {
     return NULL;
   }
   RSA* key = d2i_RSAPublicKey_bio(bio, NULL);
-  BIO_free(bio);
 
   if (key == NULL) {
     LOGE("GetKey: RSA key deserialization failure: %s",
          ERR_error_string(ERR_get_error(), NULL));
+    BIO_free(bio);
     return NULL;
   }
 
+  BIO_free(bio);
   return key;
 }