The at.o2xfs.emv.RecoveredData class does not perform any length checks and so may cause an ArrayIndexOutOfBoundsException to be thrown.