Yep, there will always be parsing bugs like not sanitizing input, logic failures, weak algorithms, timing attacks, ...