diff --git a/src/wps/wps_common.c b/src/wps/wps_common.c
index 20e0824e2..510d99d3e 100644
--- a/src/wps/wps_common.c
+++ b/src/wps/wps_common.c
@@ -384,6 +384,7 @@ static int wps_parse_oob_dev_pwd(struct wps_context *wps,
 
 	pos = attr.oob_dev_password;
 
+	wpabuf_free(oob_conf->pubkey_hash);
 	oob_conf->pubkey_hash =
 		wpabuf_alloc_copy(pos, WPS_OOB_PUBKEY_HASH_LEN);
 	if (oob_conf->pubkey_hash == NULL) {