Towards Probing Speech-Specific Risks in Large Multimodal Models: A Taxonomy, Benchmark, and Insights
On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness
Abstract (arXiv)
Large Multimodal Models (LMMs) have achieved great success recently, demonstrating a strong capability to understand multimodal information and to interact with human users. Despite the progress made, the challenge of detecting high-risk interactions in multimodal settings, and in particular in speech modality, remains largely unexplored. Conventional research on risk for speech modality primarily emphasises the content (e.g., what is captured as transcription). However, in speech-based interactions, paralinguistic cues in audio can significantly alter the intended meaning behind utterances. In this work, we propose a speech-specific risk taxonomy, covering 8 risk categories under hostility (malicious sarcasm and threats), malicious imitation (age, gender, ethnicity), and stereotypical biases (age, gender, ethnicity). Based on the taxonomy, we create a small-scale dataset for evaluating current LMMs capability in detecting these categories of risk. We observe even the latest models remain ineffective to detect various paralinguistic-specific risks in speech (e.g., Gemini 1.5 Pro is performing only slightly above random baseline). Warning: this paper contains biased and offensive examples.
Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 23 of its 37 references that are in the map. First posted on arXiv 25 Jun 2024.
Builds on
23 of 37 references.
References · 23
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2022Large Language Models are Zero-Shot Reasonerscited by 4,323
- 2022Robust Speech Recognition via Large-Scale Weak Supervisioncited by 3,972
- 2024Gemini 1.5: Unlocking multimodal understanding across millions of tokens of contextcited by 3,175
- 2021WavLM: Large-Scale Self-Supervised Pre-Training for Full Stack Speech Processingcited by 1,609
- 2023Video-LLaMA: An Instruction-tuned Audio-Visual Language Model for Video Understandingcited by 1,461
- 2021An Explanation of In-context Learning as Implicit Bayesian Inferencecited by 915
- 2023Qwen-Audio: Advancing Universal Audio Understanding via Unified Large-Scale Audio-Language Modelscited by 591
- 2022BEATs: Audio Pre-Training with Acoustic Tokenizerscited by 378
- 2023PandaGPT: One Model To Instruction-Follow Them Allcited by 330
11 more
- 2023emotion2vec: Self-Supervised Pre-Training for Speech Emotion Representationcited by 196
- 2023Do-Not-Answer: A Dataset for Evaluating Safeguards in LLMscited by 176
- 2023Audiobox: Unified Audio Generation with Natural Language Promptscited by 120
- 2023BuboGPT: Enabling Visual Grounding in Multi-Modal LLMscited by 114
- 2024GOAT-Bench: A Benchmark for Multi-Modal Lifelong Navigationcited by 93
- 2023CValues: Measuring the Values of Chinese Large Language Models from Safety to Responsibilitycited by 80
- 2024Advancing Large Language Models to Capture Varied Speaking Styles and Respond Properly in Spoken Conversationscited by 45
- 2023Paralinguistics-Enhanced Large Language Modeling of Spoken Dialoguecited by 25
- 2022Emotion Based Hate Speech Detection using Multimodal Learningcited by 18
- 2021DeToxy: A Large-Scale Multimodal Dataset for Toxicity Classification in Spoken Utterancescited by 13
- 2023Lightweight Toxicity Detection in Spoken Language: A Transformer-based Approach for Edge Devicescited by 5
Built on by
Citing papers per year: 2025: 2; 2026: 3.
5 papers.
- 2026Do Audio LLMs Listen or Read? Analyzing and Mitigating Paralinguistic Failures with VoxParadoxcited by 7
- 2025Reshaping Representation Space to Balance the Safety and Over-rejection in Large Audio Language Modelscited by 4
- 2026Resurfacing Paralinguistic Awareness in Large Audio Language Modelscited by 1
- 2025Instituto de Telecomunicacc~oes at IWSLT 2025: Aligning Small-Scale Speech and Language Models for Speech-to-Text Learningcited by 0
- 2026Towards High-Level Semantic Intelligencecited by 0
- 2026Towards High-Level Semantic Intelligence27 Jul 2026
- 2026Do Audio LLMs Listen or Read? Analyzing and Mitigating Paralinguistic Failures with VoxParadox26 May 2026
- 2026Resurfacing Paralinguistic Awareness in Large Audio Language Models12 Mar 2026
- 2025Instituto de Telecomunicacc~oes at IWSLT 2025: Aligning Small-Scale Speech and Language Models for Speech-to-Text Learning20 Jun 2025
- 2025Reshaping Representation Space to Balance the Safety and Over-rejection in Large Audio Language Models26 May 2025
Similar, not cited
Close in wording, no citation either way
- 2025Investigating Safety Vulnerabilities of Large Audio-Language Models Under Speaker Emotional Variations
- 2026MTMCS-Bench: Evaluating Contextual Safety of Multimodal Large Language Models in Multi-Turn Dialogues
- 2026Alignment Drift in Multimodal LLMs: A Two-Phase, Longitudinal Evaluation of Harm Across Eight Model Releases
- 2024Audio Is the Achilles' Heel: Red Teaming Audio Large Multimodal Models
- 2026Evolving Safety Landscape of Multi-modal Large Language Models: A Survey of Emerging Threats and Safeguards
- 2026CSR-Bench: A Benchmark for Evaluating the Cross-modal Safety and Reliability of MLLMs
- 2025"I am bad": Interpreting Stealthy, Universal and Robust Audio Jailbreaks in Audio-Language Models
- 2025SafeMT: Multi-turn Safety for Multimodal Language Models