The same exploits that are used to jailbreak the device can be used for installing malware. There has been remotely exploitable bugs in iOS, for example in WebKit, but luckily there hasn't been people exploiting them. iOS is very safe but not perfect.