If I understand this correctly, you need a malicious sqlite database file, which I don’t think you could create with sqlite itself. Which means, in order to exploit this, you first have to get this malicious database onto their computer. So while this seems serious enough, it may not be time to panic quite yet.