diff --git a/BootloaderCommonPkg/Library/SecureBootLib/SecureBootRsa.c b/BootloaderCommonPkg/Library/SecureBootLib/SecureBootRsa.c
index d00a0e99..af98d48d 100644
--- a/BootloaderCommonPkg/Library/SecureBootLib/SecureBootRsa.c
+++ b/BootloaderCommonPkg/Library/SecureBootLib/SecureBootRsa.c
@@ -51,6 +51,7 @@ DoRsaVerify (
   UINT8            Digest[HASH_DIGEST_MAX];
   UINT8            DigestSize;
 
+  ZeroMem (&Digest, sizeof(Digest));
 
   PublicKey = PubKeyHdr;
   if ((PublicKey->Identifier != PUBKEY_IDENTIFIER) || (SignatureHdr->Identifier != SIGNATURE_IDENTIFIER)){