A client's 2020 M1 MacBook Air was recently infected by CVE-2018-3837

Swanvestas wrote:

A client's 2020 M1 MacBook Air was recently infected by CVE-2018-3837.

CVEs are database identifiers. They can't infect anything other than a social media influencer's mind.

Note that CVE identifiers are year coded. This particular one is 7 years old.

It was identified and quarantined by ClamXAV.

Colour me skeptical about that.

Is this a current vulnerability in Sequoia 15.6?

It was never a vulnerability in any version of macOS. This CVE relates to a 3rd party image processing library. It has nothing to do with macOS.

Swanvestas wrote:

A client's 2020 M1 MacBook Air was recently infected by CVE-2018-3837 . It was identified and quarantined by ClamXAV.

Is this a current vulnerability in Sequoia 15.6?

Uninstall ClamXAV and your issue will go away.

Uninstall all third party apps that are Cleaners/Optimizers/VPN/Anti-Virus

all known to cause issues on the macOS

Third party AntiVirus is not recommended— it typically does nothing but add issues to the macOS and competes directly with Apple’s own built in security:

macOS antivirus - Protecting against malware in macOS - Apple Support

macOS - Security - Apple Enterprise - Business - Apple

Apple Platform Security - Apple Apple Platform Security - Apple Support

You have a ClamXAV problem not a discovered exploit. That is simply how AV Software makes the user feel like they are working so they continue to pay the subscription fees, or sell you additional removal software. It was never a vulnerability in Sequoia.