On Memorization in Diffusion Models
On the map: Diffusion models → Diffusion foundations and sampling
Abstract (arXiv)
Due to their capacity to generate novel and high-quality samples, diffusion models have attracted significant research interest in recent years. Notably, the typical training objective of diffusion models, i.e., denoising score matching, has a closed-form optimal solution that can only generate training data replicating samples. This indicates that a memorization behavior is theoretically expected, which contradicts the common generalization ability of state-of-the-art diffusion models, and thus calls for a deeper understanding. Looking into this, we first observe that memorization behaviors tend to occur on smaller-sized datasets, which motivates our definition of effective model memorization (EMM), a metric measuring the maximum size of training data at which a learned diffusion model approximates its theoretical optimum. Then, we quantify the impact of the influential factors on these memorization behaviors in terms of EMM, focusing primarily on data distribution, model configuration, and training procedure. Besides comprehensive empirical results identifying the influential factors, we surprisingly find that conditioning training data on uninformative random labels can significantly trigger the memorization in diffusion models. Our study holds practical significance for diffusion model users and offers clues to theoretical research in deep generative models. Code is available at https://github.com/sail-sg/DiffMemorize.
Key facts. Cited by 122 papers in the map (data through 7 Oct 2026). Placed in Diffusion foundations and sampling, one of 14 directions in Diffusion models. Builds on 46 of its 64 references that are in the map. First posted on arXiv 4 Oct 2023.
Builds on
46 of 64 references.
Closest ancestors · 11
Same direction, newest first
- 2023Understanding and Mitigating Copying in Diffusion Models31 May
- 2023On the Generalization of Diffusion Model24 May
- 2022Elucidating the Design Space of Diffusion-Based Generative Models1 Jun
- 2021High-Resolution Image Synthesis with Latent Diffusion Models20 Dec
- 2021Variational Diffusion Models1 Jul
- 2021Diffusion Models Beat GANs on Image Synthesis11 May
- 2021Improved Denoising Diffusion Probabilistic Models18 Feb
- 2020Score-Based Generative Modeling through Stochastic Differential Equations26 Nov
- 2020Denoising Diffusion Implicit Models6 Oct
- 2020Denoising Diffusion Probabilistic Models19 Jun
- 2020Improved Techniques for Training Score-Based Generative Models16 Jun
Other references · 35
- 2017Attention Is All You Needcited by 59,932
- 2014Adam: A Method for Stochastic Optimizationcited by 36,960
- 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,604
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,005
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 5,986
- 2015Rethinking the Inception Architecture for Computer Visioncited by 5,451
- 2019Generative Modeling by Estimating Gradients of the Data Distributioncited by 4,067
- 2021GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Modelscited by 3,595
- 2022DreamFusion: Text-to-3D using 2D Diffusioncited by 3,006
- 2020Fourier Features Let Networks Learn High Frequency Functions in Low Dimensional Domainscited by 2,170
23 more
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2016Understanding deep learning requires rethinking generalizationcited by 1,657
- 2017Accurate, Large Minibatch SGD: Training ImageNet in 1 Hourcited by 1,479
- 2016On Large-Batch Training for Deep Learning: Generalization Gap and Sharp Minimacited by 1,337
- 2022Magic3D: High-Resolution Text-to-3D Content Creationcited by 1,285
- 2022Quantifying Memorization Across Neural Language Modelscited by 755
- 2023Extracting Training Data from Diffusion Modelscited by 723
- 2019Deep Double Descent: Where Bigger Models and More Data Hurtcited by 667
- 2019Benign Overfitting in Linear Regressioncited by 544
- 2022GeoDiff: a Geometric Diffusion Model for Molecular Conformation Generationcited by 511
- 2022DiGress: Discrete Denoising diffusion for graph generationcited by 503
- 2020What Neural Networks Memorize and Why: Discovering the Long Tail via Influence Estimationcited by 492
- 2019Does Learning Require Memorization? A Short Tale about a Long Tailcited by 452
- 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 418
- 2023Make-An-Audio: Text-To-Audio Generation with Prompt-Enhanced Diffusion Modelscited by 323
- 2021Deep Learning Through the Lens of Example Difficultycited by 139
- 2023A Recipe for Watermarking Diffusion Modelscited by 136
- 2021Guided-TTS: A Diffusion Model for Text-to-Speech via Classifier Guidancecited by 84
- 2021On the geometry of generalization and memorization in deep neural networkscited by 71
- 2023Can Neural Network Memorization Be Localized?cited by 66
- 2021On Memorization in Probabilistic Deep Generative Modelscited by 60
- 2022When do GANs replicate? On the choice of dataset sizecited by 34
- 2021This Person (Probably) Exists. Identity Membership Attacks Against GAN Generated Facescited by 25
Built on by
Citing papers per year: 2023: 2; 2024: 33; 2025: 53; 2026: 34.
122 papers.
Sort:
By area:
- 2024An analytic theory of creativity in convolutional diffusion modelscited by 103
- 2025Why Diffusion Models Don't Memorize: The Role of Implicit Dynamical Regularization in Trainingcited by 78
- 2025Safety at Scale: A Comprehensive Survey of Large Model and Agent Safetycited by 63
- 2024Breaking the Curse of Dimensionality: Diffusion Models Efficiently Learn Low-Dimensional Distributionscited by 53
- 2025On the Closed-Form of Flow Matching: Generalization Does Not Arise from Target Stochasticitycited by 48
- 2023Intriguing Properties of Data Attribution on Diffusion Modelscited by 47
- 2024Towards a Mechanistic Explanation of Diffusion Model Generalizationcited by 42
- 2024A Geometric Framework for Understanding Memorization in Generative Modelscited by 40
- 2025Memorization and Regularization in Generative Diffusion Modelscited by 39
- 2024Understanding Generalizability of Diffusion Models Requires Rethinking the Hidden Gaussian Structurecited by 38
- 2024A Good Score Does not Lead to A Good Generative Modelcited by 36
- 2024Finding NeMo: Localizing Neurons Responsible For Memorization in Diffusion Modelscited by 36
38 more
- 2025Memorization to Generalization: Emergence of Diffusion Models from Associative Memorycited by 35
- 2024The Stronger the Diffusion Model, the Easier the Backdoor: Data Poisoning to Induce Copyright Breaches Without Adjusting Finetuning Pipelinecited by 33
- 2024Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defensescited by 30
- 2024Undesirable Memorization in Large Language Models: A Surveycited by 29
- 2025Locality in Image Diffusion Models Emerges from Data Statisticscited by 25
- 2025Bigger Isn't Always Memorizing: Early Stopping Overparameterized Diffusion Modelscited by 24
- 2025On the Edge of Memorization in Diffusion Modelscited by 22
- 2023The Emergence of Reproducibility and Generalizability in Diffusion Modelscited by 21
- 2024Understanding and Mitigating Memorization in Generative Models via Sharpness of Probability Landscapescited by 20
- 2025Denoising Score Matching with Random Features: Insights on Diffusion Models from Precise Learning Curvescited by 20
- 2025Diffusion Models and the Manifold Hypothesis: Log-Domain Smoothing is Geometry Adaptivecited by 20
- 2024Hidden in the Noise: Two-Stage Robust Watermarking for Imagescited by 18
- 2025A Closer Look at Model Collapse: From a Generalization-to-Memorization Perspectivecited by 18
- 2025Does Generation Require Memorization? Creative Diffusion Models using Ambient Diffusioncited by 17
- 2025Selective Underfitting in Diffusion Modelscited by 17
- 2025Taking a Big Step: Large Learning Rates in Denoising Score Matching Prevent Memorizationcited by 16
- 2024On Catastrophic Inheritance of Large Foundation Modelscited by 15
- 2025On the Interpolation Effect of Score Smoothing in Diffusion Modelscited by 15
- 2024Wasserstein proximal operators describe score-based generative models and resolve memorizationcited by 14
- 2024Deep Generative Models for 3D Medical Image Synthesiscited by 14
- 2025Provable Separations between Memorization and Generalization in Diffusion Modelscited by 14
- 2024Evaluating and Mitigating IP Infringement in Visual Generative AIcited by 13
- 2024Memorized Images in Diffusion Models share a Subspace that can be Located and Deletedcited by 13
- 2024Spatially-Aware Diffusion Models with Cross-Attention for Global Field Reconstruction with Sparse Observationscited by 13
- 2025Carr'e du champ flow matching: better quality-generalisation tradeoff in generative modelscited by 13
- 2024Iterative Ensemble Training with Anti-Gradient Control for Mitigating Memorization in Diffusion Modelscited by 12
- 2025Generative Modeling of Weights: Generalization or Memorization?cited by 12
- 2024Replication in Visual Diffusion Models: A Survey and Outlookcited by 11
- 2024Slight Corruption in Pre-training Data Makes Better Diffusion Modelscited by 9
- 2025Demystifying Diffusion Policies: Action Memorization and Simple Lookup Table Alternativescited by 9
- 2024Unified Cross-Modal Medical Image Synthesis with Hierarchical Mixture of Product-of-Expertscited by 8
- 2024U Can't Gen This? A Survey of Intellectual Property Protection Methods for Data in Generative AIcited by 7
- 2024SIDE: Surrogate Conditional Data Extraction from Diffusion Modelscited by 7
- 2024Understanding and Mitigating Memorization in Diffusion Models for Tabular Datacited by 7
- 2025Efficient Flow Matching using Latent Variablescited by 6
- 2025The Generation Phases of Flow Matching: a Denoising Perspectivecited by 6
- 2024MemBench: Memorized Image Trigger Prompt Dataset for Diffusion Modelscited by 5
- 2024Investigating Memorization in Video Diffusion Modelscited by 5
50 most cited of 122 All 122 (JSON)
- 2026Generalization in Neural Networks Through the Lens of Magnitude Potential1 Oct 2026
- 2026From Modes to Memories: Characterizing the Scale-Space Dynamics of Diffusion Models30 Sep 2026
- 2026Background Gradients Shape Memorization in Flow Matching27 Sep 2026
- 2026First-Order Stationarity of Reverse Diffusions25 Sep 2026
- 2026The Null Is the Hard Part: Exact Tests for Memorization in Generative Models23 Sep 2026
- 2026Double Descent and Malign Overfitting in Diffusion Models22 Sep 2026
- 2026Auditing Patient Privacy in Medical Generative Models: Scalable Memorization Detection with DeepSSIM++3 Sep 2026
- 2026Do Large Language Models Capture the Diversity in their Training Data?2 Sep 2026
- 2026Protecting patient privacy in clinical foundation models: Technical and legal perspectives7 Aug 2026
- 2026Explorative Modeling: Unlocking a Third Pretraining Axis and End-to-End Generation29 Jul 2026
- 2026PAC-DP: PAC-Bayesian Diffusion Policy Learning27 Jul 2026
- 2026An exact information theory of generalization phase transitions in Bayesian diffusion models9 Jul 2026
38 more
- 2026Anchored or Drifting: What Recursive Self-Generation Reveals About Training Data30 Jun 2026
- 2026Guided Discovery of New Behaviors using Diffusion Policies7 Jun 2026
- 2026Where Flow Matching Leaks: Characterising Membership Signals Along the Interpolation Path5 Jun 2026
- 2026Diffusion Models Preferentially Memorize Prototypical Examples or: Why Does My Diffusion Model Love Slop?28 May 2026
- 2026Filtered Posterior Mean Collections: A Unified Framework for Analytical Models of Diffusion Generalization22 May 2026
- 2026Reducing Diffusion Model Memorization with Higher Order Langevin Dynamics18 May 2026
- 2026The Silent Brush: Evaluating Artistic Style Leakage in AI Art Generation17 May 2026
- 2026Filtering Memorization from Parameter-Space in Diffusion Models11 May 2026
- 2026The Interplay of Data Structure and Imbalance in the Learning Dynamics of Diffusion Models7 May 2026
- 2026Understanding diffusion models requires rethinking (again) generalization7 May 2026
- 2026On the Memorization of Consistency Distillation for Diffusion Models26 Apr 2026
- 2026Memorization In Stable Diffusion Is Unexpectedly Driven by CLIP Embeddings6 Apr 2026
- 2026Manifold Generalization Provably Proceeds Memorization in Diffusion Models24 Mar 2026
- 2026Improving Diffusion Generalization with Weak-to-Strong Segmented Guidance21 Mar 2026
- 2026Proof-of-Authorship for Diffusion-based AI Generated Content18 Mar 2026
- 2026Generalization and Memorization in Rectified Flow12 Mar 2026
- 2026Biased Generalization in Diffusion Models3 Mar 2026
- 2026Two Calm Ends and the Wild Middle: A Geometric Picture of Memorization in Diffusion Models19 Feb 2026
- 2026Sparsely Supervised Diffusion2 Feb 2026
- 2026Reducing Memorisation in Generative Models via Riemannian Bayesian Inference30 Jan 2026
- 2026Memorization Control in Diffusion Models from Denoising-centric Perspective29 Jan 2026
- 2026Smoothing the Score Function to Enhance Generalization in Diffusion Models27 Jan 2026
- 2025Memorization in 3D Shape Generation: An Empirical Study29 Dec 2025
- 2025Repurposing 2D Diffusion Models for 3D Shape Completion16 Dec 2025
- 2025PhraseVAE and PhraseLDM: Latent Diffusion for Full-Song Multitrack Symbolic Music Generation12 Dec 2025
- 2025CAPTAIN: Semantic Feature Injection for Memorization Mitigation in Text-to-Image Diffusion Models11 Dec 2025
- 2025Towards Irreversible Machine Unlearning for Diffusion Models3 Dec 2025
- 2025Latent Diffusion Inversion Requires Understanding the Latent Space25 Nov 2025
- 2025Generating Synthetic Human Blastocyst Images for In-Vitro Fertilization Blastocyst Grading22 Nov 2025
- 2025A PDE Perspective on Generative Diffusion Models8 Nov 2025
- 2025Provable Separations between Memorization and Generalization in Diffusion Models5 Nov 2025
- 2025The Generation Phases of Flow Matching: a Denoising Perspective28 Oct 2025
- 2025On the Anisotropy of Score-Based Generative Models27 Oct 2025
- 2025Schr"odinger bridge for generative AI: Soft-constrained formulation and convergence analysis13 Oct 2025
- 2025Carr'e du champ flow matching: better quality-generalisation tradeoff in generative models7 Oct 2025
- 2025Diffusion Models and the Manifold Hypothesis: Log-Domain Smoothing is Geometry Adaptive2 Oct 2025
- 2025Selective Underfitting in Diffusion Models1 Oct 2025
- 2025Score-based Membership Inference on Diffusion Models29 Sep 2025
50 newest of 122 All 122 (JSON)
- 2024An analytic theory of creativity in convolutional diffusion modelscited by 103
- 2025Why Diffusion Models Don't Memorize: The Role of Implicit Dynamical Regularization in Trainingcited by 78
- 2024Breaking the Curse of Dimensionality: Diffusion Models Efficiently Learn Low-Dimensional Distributionscited by 53
- 2025On the Closed-Form of Flow Matching: Generalization Does Not Arise from Target Stochasticitycited by 48
- 2023Intriguing Properties of Data Attribution on Diffusion Modelscited by 47
- 2024Towards a Mechanistic Explanation of Diffusion Model Generalizationcited by 42
- 2025Memorization and Regularization in Generative Diffusion Modelscited by 39
- 2024Understanding Generalizability of Diffusion Models Requires Rethinking the Hidden Gaussian Structurecited by 38
- 2024A Good Score Does not Lead to A Good Generative Modelcited by 36
- 2024Finding NeMo: Localizing Neurons Responsible For Memorization in Diffusion Modelscited by 36
- 2025Memorization to Generalization: Emergence of Diffusion Models from Associative Memorycited by 35
- 2024The Stronger the Diffusion Model, the Easier the Backdoor: Data Poisoning to Induce Copyright Breaches Without Adjusting Finetuning Pipelinecited by 33
12 most cited of 98 All 98 (JSON)
- 2026From Modes to Memories: Characterizing the Scale-Space Dynamics of Diffusion Models30 Sep 2026
- 2026Background Gradients Shape Memorization in Flow Matching27 Sep 2026
- 2026First-Order Stationarity of Reverse Diffusions25 Sep 2026
- 2026Double Descent and Malign Overfitting in Diffusion Models22 Sep 2026
- 2026PAC-DP: PAC-Bayesian Diffusion Policy Learning27 Jul 2026
- 2026An exact information theory of generalization phase transitions in Bayesian diffusion models9 Jul 2026
- 2026Guided Discovery of New Behaviors using Diffusion Policies7 Jun 2026
- 2026Where Flow Matching Leaks: Characterising Membership Signals Along the Interpolation Path5 Jun 2026
- 2026Diffusion Models Preferentially Memorize Prototypical Examples or: Why Does My Diffusion Model Love Slop?28 May 2026
- 2026Filtered Posterior Mean Collections: A Unified Framework for Analytical Models of Diffusion Generalization22 May 2026
- 2026Reducing Diffusion Model Memorization with Higher Order Langevin Dynamics18 May 2026
- 2026The Silent Brush: Evaluating Artistic Style Leakage in AI Art Generation17 May 2026
12 newest of 98 All 98 (JSON)
- 2024A Geometric Framework for Understanding Memorization in Generative Modelscited by 40
- 2024Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defensescited by 30
- 2024Undesirable Memorization in Large Language Models: A Surveycited by 29
- 2024Hidden in the Noise: Two-Stage Robust Watermarking for Imagescited by 18
- 2024On Catastrophic Inheritance of Large Foundation Modelscited by 15
- 2024Deep Generative Models for 3D Medical Image Synthesiscited by 14
- 2024Evaluating and Mitigating IP Infringement in Visual Generative AIcited by 13
- 2025Generative Modeling of Weights: Generalization or Memorization?cited by 12
- 2024Unified Cross-Modal Medical Image Synthesis with Hierarchical Mixture of Product-of-Expertscited by 8
- 2024U Can't Gen This? A Survey of Intellectual Property Protection Methods for Data in Generative AIcited by 7
- 2026Explorative Modeling: Unlocking a Third Pretraining Axis and End-to-End Generationcited by 3
- 2025Schr"odinger bridge for generative AI: Soft-constrained formulation and convergence analysiscited by 2
12 most cited of 23 All 23 (JSON)
- 2026Generalization in Neural Networks Through the Lens of Magnitude Potential1 Oct 2026
- 2026The Null Is the Hard Part: Exact Tests for Memorization in Generative Models23 Sep 2026
- 2026Auditing Patient Privacy in Medical Generative Models: Scalable Memorization Detection with DeepSSIM++3 Sep 2026
- 2026Do Large Language Models Capture the Diversity in their Training Data?2 Sep 2026
- 2026Protecting patient privacy in clinical foundation models: Technical and legal perspectives7 Aug 2026
- 2026Explorative Modeling: Unlocking a Third Pretraining Axis and End-to-End Generation29 Jul 2026
- 2026Anchored or Drifting: What Recursive Self-Generation Reveals About Training Data30 Jun 2026
- 2025Memorization in 3D Shape Generation: An Empirical Study29 Dec 2025
- 2025Generating Synthetic Human Blastocyst Images for In-Vitro Fertilization Blastocyst Grading22 Nov 2025
- 2025Schr"odinger bridge for generative AI: Soft-constrained formulation and convergence analysis13 Oct 2025
- 2025Generation Properties of Stochastic Interpolation under Finite Training Set26 Sep 2025
- 2025Grounding Intelligence in Movement3 Jul 2025
12 newest of 23 All 23 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2025How Diffusion Models Memorize
- 2026Local Coverage Governs Memorization in Diffusion Models
- 2024An Inversion-based Measure of Memorization for Diffusion Models
- 2024Detecting, Explaining, and Mitigating Memorization in Diffusion Models
- 2025Generalization of Diffusion Models Arises with a Balanced Representation Space
- 2025Quantifying the Ease of Reproducing Training Data in Unconditional Diffusion Models
- 2026First Learn, Then Memorize: The Spectral Bias of Diffusion Models
- 2026Diffusion Models Memorize in Training -- and Generalize in Inference