A NULL pointer dereference occurs in the `externalEntityInitProcessor2()` function within `lib/xmlparse.c` due to the mishandling of the `XML TOK NONE` token when processing empty input. An attacker capable of controlling stream chunking can trigger an empty non-final first parse on an external entity subparser, which leads to an application crash during a subsequent parse.