There are an incredibly large number of analysis tools for C to check things like memory safety. It doesn't look like they are always used in important code, though.

A lot of memory safety CVEs come down to "we wrote a static analyzer and found a latent memory bug here."