When you speak of “parsing untrusted data”, do you mean to imply that “parsing trusted data” even exists? I for one would view any and all input as untrusted.
Therefore, it follows that re-writing parsers in memory-safe languages would provide a nice bang-for-buck.