Malware download onto an iPad

Hi

Can a malware software app be downloaded onto an iPad when browsing websites in Safari? Without me knowing it has happened? Could such an app control access to contact lists, control the camera, access your data?

my iPad is old-is and has iOS 9.3.5

Thanks