{"total":17,"rows":[{"id":"2504.04893","title":"SCAM: A Real-World Typographic Robustness Evaluation for Multimodal Foundation Models","created":"2025-04-07","cited_by_count":13,"area":"mllm"},{"id":"2412.12722","title":"Defending LVLMs Against Vision Attacks through Partial-Perception Supervision","created":"2024-12-17","cited_by_count":7,"area":"mllm"},{"id":"2508.05430","title":"Explaining Similarity in Vision-Language Encoders with Weighted Banzhaf Interactions","created":"2025-08-07","cited_by_count":6,"area":"mllm"},{"id":"2504.01589","title":"Text Speaks Louder than Vision: ASCII Art Reveals Textual Biases in Vision-Language Models","created":"2025-04-02","cited_by_count":5,"area":"mllm"},{"id":"2510.04257","title":"AgentTypo: Adaptive Typographic Prompt Injection Attacks against Black-box Multimodal Agents","created":"2025-10-05","cited_by_count":4,"area":"mllm"},{"id":"2601.17383","title":"Physical Prompt Injection Attacks on Large Vision-Language Models","created":"2026-01-24","cited_by_count":4,"area":"mllm"},{"id":"2603.27918","title":"Adversarial Attacks on Multimodal Large Language Models: A Comprehensive Survey","created":"2026-03-30","cited_by_count":4,"area":"mllm"},{"id":"2512.11899","title":"Read or Ignore? A Unified Benchmark for Typographic-Attack Robustness and Text Recognition in Vision-Language Models","created":"2025-12-10","cited_by_count":2,"area":"mllm"},{"id":"2604.12371","title":"Reading Between the Pixels: Linking Text-Image Embedding Alignment to Typographic Attack Success on Vision-Language Models","created":"2026-04-14","cited_by_count":2,"area":"mllm"},{"id":"2602.07104","title":"Extended to Reality: Prompt Injection in 3D Environments","created":"2026-02-06","cited_by_count":1,"area":"mllm"},{"id":"2604.19844","title":"If you're waiting for a sign... that might not be it! Mitigating Trust Boundary Confusion from Visual Injections on Vision-Language Agentic Systems","created":"2026-04-21","cited_by_count":1,"area":"mllm"},{"id":"2607.00218","title":"EgoSafetyBench: A Diagnostic Egocentric Video Benchmark for Evaluating Embodied VLMs as Runtime Safety Guards","created":"2026-06-30","cited_by_count":1,"area":"mllm"},{"id":"2604.25102","title":"One Perturbation, Two Failure Modes: Probing VLM Safety via Embedding-Guided Typographic Perturbations","created":"2026-04-28","cited_by_count":0,"area":"mllm"},{"id":"2605.18593","title":"Not What You Asked For: Typographic Attacks in Household Robot Manipulation","created":"2026-05-18","cited_by_count":0,"area":"mllm"},{"id":"2607.02494","title":"Towards Robustness against Typographic Attack with Training-free Concept Localization","created":"2026-07-02","cited_by_count":0,"area":"mllm"},{"id":"2607.07288","title":"InfraQR: Edge-Placed QR-Inspired Structured Patch Attacks on Infrared Vision-Language Models","created":"2026-07-08","cited_by_count":0,"area":"mllm"},{"id":"2607.14974","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","created":"2026-07-16","cited_by_count":0,"area":"mllm"}],"next_cursor":null}