In the default setup batchnorm layers use affine parameters (weight and bias) as well as the running estimates. Neither of those tensors is bounded in any way.
If you want to enforce a certain range you might e.g. clip the weight after an update.