Is ClamAV safe enough to use?

The proverb "the children of the shoemaker go barefoot" might fit here...

I'll explain: In Application Security, CVEs are something which often being exposed about various apps/tools, also, they get fixed overtime, as the app gets hacked again. I need to recommend a usage of a thin AV tool, and I looked at some formal CVE sites such as NVD, CVEdetails, etc. I want to recommend a safe AV tool to work as a Security Agent on a 'thin' Linux RT embedded system. I didn't think ClamAV (that was chosen) is safe enough, and here is my evidence:

CVEDetails:

NVD: