I've been looking for answers to this problem as well.
One that I found is DevPartner Bounds Checker (The link is for DevPartner Studio. It is possible to buy just the bounds checker component, however). I was able to get some good results from it, but I also had problems with its instrumenting tool crashing on my particular codebase. Their tech support was pretty bad. YMMV.
Another is Parasoft Insure++. This tool has been around a long time, and the demos looked good. I haven't had much time to use it yet, but it seems hopeful.
Both of these are commercial products with sales teams and technical support. Prices tend to be negotiated with a salesman.