Both Text and Images Leaked! A Systematic Analysis of Data Contamination in Multimodal LLM
On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness
Abstract (arXiv)
The rapid advancement of multimodal large language models (MLLMs) has significantly enhanced performance across benchmarks. However, data contamination-unintentional memorization of benchmark data during model training-poses critical challenges for fair evaluation. Existing detection methods for unimodal large language models (LLMs) are inadequate for MLLMs due to multimodal data complexity and multi-phase training. We systematically analyze multimodal data contamination using our analytical framework, MM-Detect, which defines two contamination categories-unimodal and cross-modal-and effectively quantifies contamination severity across multiple-choice and caption-based Visual Question Answering tasks. Evaluations on twelve MLLMs and five benchmarks reveal significant contamination, particularly in proprietary models and older benchmarks. Crucially, contamination sometimes originates during unimodal pre-training rather than solely from multimodal fine-tuning. Our insights refine contamination understanding, guiding evaluation practices and improving multimodal model reliability.
Key facts. Cited by 10 papers in the map (data through 14 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 16 of its 31 references that are in the map. First posted on arXiv 6 Nov 2024.
Builds on
16 of 31 references.
References · 16
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,170
- 2023Improved Baselines with Visual Instruction Tuningcited by 4,418
- 2024Gemini 1.5: Unlocking multimodal understanding across millions of tokens of contextcited by 3,224
- 2023InternVL: Scaling up Vision Foundation Models and Aligning for Generic Visual-Linguistic Taskscited by 2,565
- 2023Qwen-VL: A Versatile Vision-Language Model for Understanding, Localization, Text Reading, and Beyondcited by 2,224
- 2023MMBench: Is Your Multi-modal Model an All-around Player?cited by 2,141
- 2022Learn to Explain: Multimodal Reasoning via Thought Chains for Science Question Answeringcited by 1,919
- 2024How Far Are We to GPT-4V? Closing the Gap to Commercial Multimodal Models with Open-Source Suitescited by 1,050
- 2024Yi: Open Foundation Models by 01.AIcited by 719
4 more
- 2018nocaps: novel object captioning at scalecited by 444
- 2023OBELICS: An Open Web-Scale Filtered Dataset of Interleaved Image-Text Documentscited by 316
- 2023Investigating Data Contamination in Modern Benchmarks for Large Language Modelscited by 138
- 2024MileBench: Benchmarking MLLMs in Long Contextcited by 88
Built on by
Citing papers per year: 2025: 2; 2026: 8.
10 papers.
- 2025KBE-DME: Dynamic Multimodal Evaluation via Knowledge Enhanced Benchmark Evolutioncited by 2
- 2025FiMMIA: scaling semantic perturbation-based membership inference across modalitiescited by 0
- 2026Can MLLMs Read Students' Minds? Unpacking Multimodal Error Analysis in Handwritten Mathcited by 0
- 2026Benchmark Shadows: Data Alignment, Parameter Footprints, and Generalization in Large Language Modelscited by 0
- 2026VGenST-Bench: A Benchmark for Spatio-Temporal Reasoning via Active Video Synthesiscited by 0
- 2026A Controlled Audit of Pretraining Contamination in Public Medical Vision-Language Benchmarkscited by 0
- 2026REKEY: Metadata-Grounded Visual-Key Regeneration for Contamination-Resilient VQA Evaluationcited by 0
- 2026MMBench-Live: A Continuously Evolving Benchmark for Multimodal Modelscited by 0
- 2026Learning to Zoom Efficiently with a Contrastive Curriculumcited by 0
- 2026Auditing VLM Benchmarks from Existing Evaluation Runscited by 0
- 2026Auditing VLM Benchmarks from Existing Evaluation Runs9 Oct 2026
- 2026Learning to Zoom Efficiently with a Contrastive Curriculum2 Sep 2026
- 2026MMBench-Live: A Continuously Evolving Benchmark for Multimodal Models2 Jul 2026
- 2026REKEY: Metadata-Grounded Visual-Key Regeneration for Contamination-Resilient VQA Evaluation17 Jun 2026
- 2026A Controlled Audit of Pretraining Contamination in Public Medical Vision-Language Benchmarks8 Jun 2026
- 2026VGenST-Bench: A Benchmark for Spatio-Temporal Reasoning via Active Video Synthesis21 May 2026
- 2026Benchmark Shadows: Data Alignment, Parameter Footprints, and Generalization in Large Language Models1 Apr 2026
- 2026Can MLLMs Read Students' Minds? Unpacking Multimodal Error Analysis in Handwritten Math26 Mar 2026
- 2025FiMMIA: scaling semantic perturbation-based membership inference across modalities2 Dec 2025
- 2025KBE-DME: Dynamic Multimodal Evaluation via Knowledge Enhanced Benchmark Evolution24 Oct 2025
Similar, not cited
Close in wording, no citation either way
- 2024Does Data Contamination Detection Work (Well) for LLMs? A Survey and Evaluation on Detection Assumptions
- 2025Reasoning Multimodal Large Language Model: Data Contamination and Dynamic Evaluation
- 2026Are Large Language Models Truly Smarter Than Humans?
- 2025Contamination Detection for VLMs using Multi-Modal Semantic Perturbation
- 2023Task Contamination: Language Models May Not Be Few-Shot Anymore
- 2026Calibrating Post-Training Feature Shifts for LLM Data Contamination Detection
- 2025Can't See the Forest for the Trees: Benchmarking Multimodal Safety Awareness for Multimodal LLMs
- 2025SafeEraser: Enhancing Safety in Multimodal Large Language Models through Multimodal Machine Unlearning