Ubuntu – Is this apt vulnerability (CVE-2019-3462) a security concern for Ubuntu users

If an application doesn't require root to install, then the application is in fact "safer" (I quoted safer because, in general, an application can still be harmful if you don't know what it does whether you used sudo or not. e.g. Maybe it will sniff around your home directory and start uploading some confidential data, and you wouldn't need root access for that).

What you quoted means that you can unpack the game anywhere you want and start using it directly. Since your home directory is yours, then unpacking in your home directory does not require sudo.

Since you installed the game without sudo, then that just means the game doesn't need access to any of the system directories (i.e. safer).

The Ubuntu Security Team's wiki page on Bug Triage says that priority levels are described in ubuntu-cve-tracker's README, where you can see this:

Ubuntu Priorities

These are very similar to the Debian priorities, but with some differences. Priorities can be roughly mapped as:

negligible Something that is technically a security problem, but is only theoretical in nature, requires a very special situation, has almost no install base, or does no real damage. These tend not to get backport from upstreams, and will likely not be included in security updates unless there is an easy fix and some other issue causes an update.

low Something that is a security problem, but is hard to exploit due to environment, requires a user-assisted attack, a small install base, or does very little damage. These tend to be included in security updates only when higher priority issues require an update, or if many low priority issues have built up.

medium Something is a real security problem, and is exploitable for many people. Includes network daemon denial of service attacks, cross-site scripting, and gaining user privileges. Updates should be made soon for this priority of issue.

high A real problem, exploitable for many people in a default installation. Includes serious remote denial of services, local root privilege escalations, or data loss.

critical A world-burning problem, exploitable for nearly all people in a default installation of Ubuntu. Includes remote root privilege escalations, or massive data loss.

CVE-2017-14491 has high priority because dnsmasq is installed by default and the bug allows both denial-of-service and code execution remotely and is not particularly hard to exploit.