Human-Adversarial Visual Question Answering
Not on the map. Why?
Abstract (arXiv)
Performance on the most commonly used Visual Question Answering dataset (VQA v2) is starting to approach human accuracy. However, in interacting with state-of-the-art VQA models, it is clear that the problem is far from being solved. In order to stress test VQA models, we benchmark them against human-adversarial examples. Human subjects interact with a state-of-the-art VQA model, and for each image in the dataset, attempt to find a question where the model's predicted answer is incorrect. We find that a wide range of state-of-the-art models perform poorly when evaluated on these examples. We conduct an extensive analysis of the collected adversarial examples and provide guidance on future research directions. We hope that this Adversarial VQA (AdVQA) benchmark can help drive progress in the field and advance the state of the art.
Key facts. Cited by 57 papers in the map (data through 7 Oct 2026). Builds on 54 of its 64 references that are in the map. First posted on arXiv 4 Jun 2021.
Builds on
54 of 64 references.
References · 54
- 2017Attention Is All You Needcited by 59,932
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2014Adam: A Method for Stochastic Optimizationcited by 36,960
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,160
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2016Visual Genome: Connecting Language and Vision Using Crowdsourced Dense Image Annotationscited by 2,646
- 2016Making the V in VQA Matter: Elevating the Role of Image Understanding in Visual Question Answeringcited by 2,498
- 2015VQA: Visual Question Answeringcited by 2,489
38 more
- 2019ViLBERT: Pretraining Task-Agnostic Visiolinguistic Representations for Vision-and-Language Taskscited by 2,219
- 2019Towards VQA Models That Can Readcited by 1,696
- 2015Microsoft COCO Captions: Data Collection and Evaluation Servercited by 1,447
- 2016CLEVR: A Diagnostic Dataset for Compositional Language and Elementary Visual Reasoningcited by 1,445
- 2017Bottom-Up and Top-Down Attention for Image Captioning and Visual Question Answeringcited by 1,310
- 2019VisualBERT: A Simple and Performant Baseline for Vision and Languagecited by 1,291
- 2021ViLT: Vision-and-Language Transformer Without Convolution or Region Supervisioncited by 1,224
- 2020Oscar: Object-Semantics Aligned Pre-training for Vision-Language Taskscited by 1,213
- 2019OK-VQA: A Visual Question Answering Benchmark Requiring External Knowledgecited by 1,114
- 2018VizWiz Grand Challenge: Answering Visual Questions from Blind Peoplecited by 852
- 2019Adversarial NLI: A New Benchmark for Natural Language Understandingcited by 798
- 2020The Hateful Memes Challenge: Detecting Hate Speech in Multimodal Memescited by 485
- 2021Dynabench: Rethinking Benchmarking in NLPcited by 447
- 2017Men Also Like Shopping: Reducing Gender Bias Amplification using Corpus-level Constraintscited by 420
- 2019Deep Modular Co-Attention Networks for Visual Question Answeringcited by 338
- 2017Don't Just Assume; Look and Answer: Overcoming Priors for Visual Question Answeringcited by 337
- 2019Scene Text Visual Question Answeringcited by 327
- 2020Large-Scale Adversarial Training for Vision-and-Language Representation Learningcited by 327
- 2017Parseval Networks: Improving Robustness to Adversarial Examplescited by 288
- 201912-in-1: Multi-Task Vision and Language Representation Learningcited by 278
- 2016Multimodal Compact Bilinear Pooling for Visual Question Answering and Visual Groundingcited by 243
- 2020UNIMO: Towards Unified-Modal Understanding and Generation via Cross-Modal Contrastive Learningcited by 239
- 2018Women also Snowboard: Overcoming Bias in Captioning Modelscited by 236
- 2020Learning from the Worst: Dynamically Generated Datasets to Improve Online Hate Detectioncited by 217
- 2021UniT: Multimodal Multitask Learning with a Unified Transformercited by 195
- 2019Build it Break it Fix it for Dialogue Safety: Robustness from Adversarial Human Attackcited by 176
- 2020Beat the AI: Investigating Adversarial Human Annotation for Reading Comprehensioncited by 131
- 2019Supervised Multimodal Bitransformers for Classifying Images and Textcited by 130
- 2021VinVL: Revisiting Visual Representations in Vision-Language Modelscited by 109
- 2019Towards Causal VQA: Revealing and Reducing Spurious Correlations by Invariant and Covariant Semantic Editingcited by 108
- 2019Iterative Answer Prediction with Pointer-Augmented Multimodal Transformers for TextVQAcited by 107
- 2019Cycle-Consistency for Robust Visual Question Answeringcited by 105
- 2021Adversarial VQA: A New Benchmark for Evaluating the Robustness of VQA Modelscited by 74
- 2019Rosetta: Large scale system for text detection and recognition in imagescited by 69
- 2020DynaSent: A Dynamic Benchmark for Sentiment Analysiscited by 63
- 2018Pythia v0.1: the Winning Entry to the VQA Challenge 2018cited by 62
- 2020What is More Likely to Happen Next? Video-and-Language Future Event Predictioncited by 61
- 2020VQA-LOL: Visual Question Answering under the Lens of Logiccited by 48
50 most cited of 54 All 54 (JSON)
Built on by
Citing papers per year: 2021: 4; 2022: 12; 2023: 13; 2024: 12; 2025: 10; 2026: 6.
57 papers.
Sort:
By area:
- 2023On Evaluating Adversarial Robustness of Large Vision-Language Modelscited by 281
- 2024NaturalBench: Evaluating Vision-Language Models on Natural Adversarial Samplescited by 94
- 2024MTVQA: Benchmarking Multilingual Text-Centric Visual Question Answeringcited by 93
- 2025Findings of the BabyLM Challenge: Sample-Efficient Pretraining on Developmentally Plausible Corporacited by 86
- 2022Video Question Answering: Datasets, Algorithms and Challengescited by 84
- 2023Negative Object Presence Evaluation (NOPE) to Measure Object Hallucination in Vision-Language Modelscited by 80
- 2022Surgical-VQA: Visual Question Answering in Surgical Scenes using Transformercited by 58
- 2023Surgical-VQLA: Transformer with Gated Vision-Language Embedding for Visual Question Localized-Answering in Robotic Surgerycited by 44
- 2024An Image Is Worth 1000 Lies: Adversarial Transferability across Prompts on Vision-Language Modelscited by 40
- 2024Break the Visual Perception: Adversarial Attacks Targeting Encoded Visual Tokens of Large Vision-Language Modelscited by 27
- 2022Are Deep Neural Networks SMARTer than Second Graders?cited by 24
- 2023Improving Selective Visual Question Answering by Learning from Your Peerscited by 24
38 more
- 2022Generalized but not Robust? Comparing the Effects of Data Modification Methods on Out-of-Domain Generalization and Adversarial Robustnesscited by 23
- 2023Robust Visual Question Answering: Datasets, Methods, and Future Challengescited by 23
- 2023UNK-VQA: A Dataset and a Probe into the Abstention Ability of Multi-modal Large Modelscited by 23
- 2023What's the Meaning of Superhuman Performance in Today's NLU?cited by 22
- 2022Reassessing Evaluation Practices in Visual Question Answering: A Case Study on Out-of-Distribution Generalizationcited by 20
- 2022WinoGAViL: Gamified Association Benchmark to Challenge Vision-and-Language Modelscited by 20
- 2024MirrorCheck: Efficient Adversarial Defense for Vision-Language Modelscited by 19
- 2024Look, Listen, and Answer: Overcoming Biases for Audio-Visual Question Answeringcited by 18
- 2022Dynatask: A Framework for Creating Dynamic AI Benchmark Taskscited by 16
- 2023Rephrase, Augment, Reason: Visual Grounding of Questions for Vision-Language Modelscited by 14
- 2024SK-VQA: Synthetic Knowledge Generation at Scale for Training Context-Augmented Multimodal LLMscited by 12
- 2024Learning to Rematch Mismatched Pairs for Robust Cross-Modal Retrievalcited by 11
- 2024What makes a good metric? Evaluating automatic metrics for text-to-image consistencycited by 11
- 2025Directional Gradient Projection for Robust Fine-Tuning of Foundation Modelscited by 10
- 2021Semantically Distributed Robust Optimization for Vision-and-Language Inferencecited by 9
- 2022MaXM: Towards Multilingual Visual Question Answeringcited by 9
- 2023Improving Visual Question Answering Models through Robustness Analysis and In-Context Learning with a Chain of Basic Questionscited by 9
- 2022Correlation Information Bottleneck: Towards Adapting Pretrained Multimodal Models for Robust Visual Question Answeringcited by 7
- 2023RoCOCO: Robustness Benchmark of MS-COCO to Stress-test Image-Text Matching Modelscited by 7
- 2024Is your benchmark truly adversarial? AdvScore: Evaluating Human-Grounded Adversarialnesscited by 7
- 2021Unsupervised Natural Language Inference Using PHL Triplet Generationcited by 6
- 2021MLP Architectures for Vision-and-Language Modeling: An Empirical Studycited by 6
- 2023EVJVQA Challenge: Multilingual Visual Question Answeringcited by 6
- 2026Do Medical Vision Language Models Actually See? A Counterfactual Grounding Framework and Hard-Negative Contrastive Training for Visually-Reliant Medical VLMscited by 6
- 2025Variational Visual Question Answering for Uncertainty-Aware Selective Predictioncited by 5
- 2025FRAMES-VQA: Benchmarking Fine-Tuning Robustness across Multi-Modal Shifts in Visual Question Answeringcited by 5
- 2022Fine-Grained Visual Entailmentcited by 4
- 2022Robustness of Fusion-based Multimodal Classifiers to Cross-Modal Content Dilutionscited by 4
- 2025Mitigating Easy Option Bias in Multiple-Choice Question Answeringcited by 4
- 2022Measuring CLEVRness: Blackbox testing of Visual Reasoning Modelscited by 3
- 2023Cross-Modal Attribute Insertions for Assessing the Robustness of Vision-and-Language Learningcited by 3
- 2026Learning Explicit Behavioral Models with Adaptive Questions and World-Model Probescited by 2
- 2021Combining Data-driven Supervision with Human-in-the-loop Feedback for Entity Resolutioncited by 1
- 2024How the Advent of Ubiquitous Large Language Models both Stymie and Turbocharge Dynamic Adversarial Question Generationcited by 1
- 2025Light as Deception: GPT-driven Natural Relighting Against Vision-Language Pre-training Modelscited by 1
- 2025Differences That Matter: Auditing Models for Capability Gap Discovery and Rectificationcited by 1
- 2026Stress Tests REVEAL Fragile Temporal and Visual Grounding in Video-Language Modelscited by 1
- 2026AUDITA: A New Dataset to Audit Humans vs. AI Skill at Audio QAcited by 1
50 most cited of 57 All 57 (JSON)
- 2026Do Medical Vision Language Models Actually See? A Counterfactual Grounding Framework and Hard-Negative Contrastive Training for Visually-Reliant Medical VLMs4 Jul 2026
- 2026Learning Explicit Behavioral Models with Adaptive Questions and World-Model Probes5 Jun 2026
- 2026SIEVES: Selective Prediction Generalizes through Visual Evidence Scoring28 Apr 2026
- 2026AUDITA: A New Dataset to Audit Humans vs. AI Skill at Audio QA23 Apr 2026
- 2026Stress Tests REVEAL Fragile Temporal and Visual Grounding in Video-Language Models11 Feb 2026
- 2026Evaluating the Impact of Post-Training Quantization on Reliable VQA with Multimodal LLMs8 Feb 2026
- 2025Differences That Matter: Auditing Models for Capability Gap Discovery and Rectification18 Dec 2025
- 2025Mitigating Easy Option Bias in Multiple-Choice Question Answering19 Aug 2025
- 2025Revisiting CroPA: A Reproducibility Study and Enhancements for Cross-Prompt Adversarial Transferability in Vision-Language Models28 Jun 2025
- 2025LARGO: Low-Rank Regulated Gradient Projection for Robust Parameter Efficient Fine-Tuning14 Jun 2025
- 2025Light as Deception: GPT-driven Natural Relighting Against Vision-Language Pre-training Models30 May 2025
- 2025FRAMES-VQA: Benchmarking Fine-Tuning Robustness across Multi-Modal Shifts in Visual Question Answering27 May 2025
38 more
- 2025Variational Visual Question Answering for Uncertainty-Aware Selective Prediction14 May 2025
- 2025Findings of the BabyLM Challenge: Sample-Efficient Pretraining on Developmentally Plausible Corpora10 Apr 2025
- 2025Directional Gradient Projection for Robust Fine-Tuning of Foundation Models21 Feb 2025
- 2025Admitting Ignorance Helps the Video Question Answering Models to Answer15 Jan 2025
- 2024What makes a good metric? Evaluating automatic metrics for text-to-image consistency18 Dec 2024
- 2024NaturalBench: Evaluating Vision-Language Models on Natural Adversarial Samples18 Oct 2024
- 2024Break the Visual Perception: Adversarial Attacks Targeting Encoded Visual Tokens of Large Vision-Language Models9 Oct 2024
- 2024SK-VQA: Synthetic Knowledge Generation at Scale for Training Context-Augmented Multimodal LLMs28 Jun 2024
- 2024Is your benchmark truly adversarial? AdvScore: Evaluating Human-Grounded Adversarialness24 Jun 2024
- 2024MirrorCheck: Efficient Adversarial Defense for Vision-Language Models13 Jun 2024
- 2024MTVQA: Benchmarking Multilingual Text-Centric Visual Question Answering20 May 2024
- 2024Look, Listen, and Answer: Overcoming Biases for Audio-Visual Question Answering18 Apr 2024
- 2024A Unified Optimal Transport Framework for Cross-Modal Retrieval with Noisy Labels20 Mar 2024
- 2024An Image Is Worth 1000 Lies: Adversarial Transferability across Prompts on Vision-Language Models14 Mar 2024
- 2024Learning to Rematch Mismatched Pairs for Robust Cross-Modal Retrieval8 Mar 2024
- 2024How the Advent of Ubiquitous Large Language Models both Stymie and Turbocharge Dynamic Adversarial Question Generation20 Jan 2024
- 2023From text to multimodal: a survey of adversarial example generation in question answering systems26 Dec 2023
- 2023UNK-VQA: A Dataset and a Probe into the Abstention Ability of Multi-modal Large Models17 Oct 2023
- 2023Rephrase, Augment, Reason: Visual Grounding of Questions for Vision-Language Models9 Oct 2023
- 2023Negative Object Presence Evaluation (NOPE) to Measure Object Hallucination in Vision-Language Models9 Oct 2023
- 2023Robust Visual Question Answering: Datasets, Methods, and Future Challenges21 Jul 2023
- 2023Cross-Modal Attribute Insertions for Assessing the Robustness of Vision-and-Language Learning19 Jun 2023
- 2023Improving Selective Visual Question Answering by Learning from Your Peers14 Jun 2023
- 2023On Evaluating Adversarial Robustness of Large Vision-Language Models26 May 2023
- 2023Surgical-VQLA: Transformer with Gated Vision-Language Embedding for Visual Question Localized-Answering in Robotic Surgery19 May 2023
- 2023What's the Meaning of Superhuman Performance in Today's NLU?15 May 2023
- 2023RoCOCO: Robustness Benchmark of MS-COCO to Stress-test Image-Text Matching Models21 Apr 2023
- 2023Improving Visual Question Answering Models through Robustness Analysis and In-Context Learning with a Chain of Basic Questions6 Apr 2023
- 2023EVJVQA Challenge: Multilingual Visual Question Answering23 Feb 2023
- 2022Are Deep Neural Networks SMARTer than Second Graders?20 Dec 2022
- 2022Robustness of Fusion-based Multimodal Classifiers to Cross-Modal Content Dilutions4 Nov 2022
- 2022Correlation Information Bottleneck: Towards Adapting Pretrained Multimodal Models for Robust Visual Question Answering14 Sep 2022
- 2022MaXM: Towards Multilingual Visual Question Answering12 Sep 2022
- 2022WinoGAViL: Gamified Association Benchmark to Challenge Vision-and-Language Models25 Jul 2022
- 2022Surgical-VQA: Visual Question Answering in Surgical Scenes using Transformer22 Jun 2022
- 2022Reassessing Evaluation Practices in Visual Question Answering: A Case Study on Out-of-Distribution Generalization24 May 2022
- 2022Dynatask: A Framework for Creating Dynamic AI Benchmark Tasks5 Apr 2022
- 2022Fine-Grained Visual Entailment29 Mar 2022
50 newest of 57 All 57 (JSON)
- 2023On Evaluating Adversarial Robustness of Large Vision-Language Modelscited by 281
- 2024NaturalBench: Evaluating Vision-Language Models on Natural Adversarial Samplescited by 94
- 2023Negative Object Presence Evaluation (NOPE) to Measure Object Hallucination in Vision-Language Modelscited by 80
- 2024An Image Is Worth 1000 Lies: Adversarial Transferability across Prompts on Vision-Language Modelscited by 40
- 2024Break the Visual Perception: Adversarial Attacks Targeting Encoded Visual Tokens of Large Vision-Language Modelscited by 27
- 2024MirrorCheck: Efficient Adversarial Defense for Vision-Language Modelscited by 19
- 2024SK-VQA: Synthetic Knowledge Generation at Scale for Training Context-Augmented Multimodal LLMscited by 12
- 2022Correlation Information Bottleneck: Towards Adapting Pretrained Multimodal Models for Robust Visual Question Answeringcited by 7
- 2023RoCOCO: Robustness Benchmark of MS-COCO to Stress-test Image-Text Matching Modelscited by 7
- 2026Do Medical Vision Language Models Actually See? A Counterfactual Grounding Framework and Hard-Negative Contrastive Training for Visually-Reliant Medical VLMscited by 6
- 2025Light as Deception: GPT-driven Natural Relighting Against Vision-Language Pre-training Modelscited by 1
- 2025Differences That Matter: Auditing Models for Capability Gap Discovery and Rectificationcited by 1
12 most cited of 15 All 15 (JSON)
- 2026Do Medical Vision Language Models Actually See? A Counterfactual Grounding Framework and Hard-Negative Contrastive Training for Visually-Reliant Medical VLMs4 Jul 2026
- 2026SIEVES: Selective Prediction Generalizes through Visual Evidence Scoring28 Apr 2026
- 2026Evaluating the Impact of Post-Training Quantization on Reliable VQA with Multimodal LLMs8 Feb 2026
- 2025Differences That Matter: Auditing Models for Capability Gap Discovery and Rectification18 Dec 2025
- 2025Revisiting CroPA: A Reproducibility Study and Enhancements for Cross-Prompt Adversarial Transferability in Vision-Language Models28 Jun 2025
- 2025Light as Deception: GPT-driven Natural Relighting Against Vision-Language Pre-training Models30 May 2025
- 2024NaturalBench: Evaluating Vision-Language Models on Natural Adversarial Samples18 Oct 2024
- 2024Break the Visual Perception: Adversarial Attacks Targeting Encoded Visual Tokens of Large Vision-Language Models9 Oct 2024
- 2024SK-VQA: Synthetic Knowledge Generation at Scale for Training Context-Augmented Multimodal LLMs28 Jun 2024
- 2024MirrorCheck: Efficient Adversarial Defense for Vision-Language Models13 Jun 2024
- 2024An Image Is Worth 1000 Lies: Adversarial Transferability across Prompts on Vision-Language Models14 Mar 2024
- 2023Negative Object Presence Evaluation (NOPE) to Measure Object Hallucination in Vision-Language Models9 Oct 2023
12 newest of 15 All 15 (JSON)
- 2022WinoGAViL: Gamified Association Benchmark to Challenge Vision-and-Language Modelscited by 20
- 2023Rephrase, Augment, Reason: Visual Grounding of Questions for Vision-Language Modelscited by 14
- 2025Variational Visual Question Answering for Uncertainty-Aware Selective Predictioncited by 5
- 2022Fine-Grained Visual Entailmentcited by 4
- 2022Measuring CLEVRness: Blackbox testing of Visual Reasoning Modelscited by 3
- 2025Variational Visual Question Answering for Uncertainty-Aware Selective Prediction14 May 2025
- 2023Rephrase, Augment, Reason: Visual Grounding of Questions for Vision-Language Models9 Oct 2023
- 2022WinoGAViL: Gamified Association Benchmark to Challenge Vision-and-Language Models25 Jul 2022
- 2022Fine-Grained Visual Entailment29 Mar 2022
- 2022Measuring CLEVRness: Blackbox testing of Visual Reasoning Models24 Feb 2022
- 2024MTVQA: Benchmarking Multilingual Text-Centric Visual Question Answeringcited by 93
- 2025Findings of the BabyLM Challenge: Sample-Efficient Pretraining on Developmentally Plausible Corporacited by 86
- 2022Video Question Answering: Datasets, Algorithms and Challengescited by 84
- 2022Surgical-VQA: Visual Question Answering in Surgical Scenes using Transformercited by 58
- 2023Surgical-VQLA: Transformer with Gated Vision-Language Embedding for Visual Question Localized-Answering in Robotic Surgerycited by 44
- 2022Are Deep Neural Networks SMARTer than Second Graders?cited by 24
- 2023Improving Selective Visual Question Answering by Learning from Your Peerscited by 24
- 2022Generalized but not Robust? Comparing the Effects of Data Modification Methods on Out-of-Domain Generalization and Adversarial Robustnesscited by 23
- 2023Robust Visual Question Answering: Datasets, Methods, and Future Challengescited by 23
- 2023UNK-VQA: A Dataset and a Probe into the Abstention Ability of Multi-modal Large Modelscited by 23
- 2023What's the Meaning of Superhuman Performance in Today's NLU?cited by 22
- 2022Reassessing Evaluation Practices in Visual Question Answering: A Case Study on Out-of-Distribution Generalizationcited by 20
12 most cited of 36 All 36 (JSON)
- 2026AUDITA: A New Dataset to Audit Humans vs. AI Skill at Audio QA23 Apr 2026
- 2026Stress Tests REVEAL Fragile Temporal and Visual Grounding in Video-Language Models11 Feb 2026
- 2025Mitigating Easy Option Bias in Multiple-Choice Question Answering19 Aug 2025
- 2025LARGO: Low-Rank Regulated Gradient Projection for Robust Parameter Efficient Fine-Tuning14 Jun 2025
- 2025FRAMES-VQA: Benchmarking Fine-Tuning Robustness across Multi-Modal Shifts in Visual Question Answering27 May 2025
- 2025Findings of the BabyLM Challenge: Sample-Efficient Pretraining on Developmentally Plausible Corpora10 Apr 2025
- 2025Directional Gradient Projection for Robust Fine-Tuning of Foundation Models21 Feb 2025
- 2025Admitting Ignorance Helps the Video Question Answering Models to Answer15 Jan 2025
- 2024What makes a good metric? Evaluating automatic metrics for text-to-image consistency18 Dec 2024
- 2024Is your benchmark truly adversarial? AdvScore: Evaluating Human-Grounded Adversarialness24 Jun 2024
- 2024MTVQA: Benchmarking Multilingual Text-Centric Visual Question Answering20 May 2024
- 2024Look, Listen, and Answer: Overcoming Biases for Audio-Visual Question Answering18 Apr 2024
12 newest of 36 All 36 (JSON)