It means the Auth.IdentityTokenXChangeData.Deserialize method creates a new MemoryStream instance with a null buffer argument.

This method seems specific to your code / environment (there is an Auth.IdentityModule in your site), so you need to take a look at it.