Not Just Text: Uncovering Vision Modality Typographic Threats in Image Generation Models
Not on the map. Why?
Abstract (arXiv)
Current image generation models can effortlessly produce high-quality, highly realistic images, but this also increases the risk of misuse. In various Text-to-Image or Image-to-Image tasks, attackers can generate a series of images containing inappropriate content by simply editing the language modality input. To mitigate this security concern, numerous guarding or defensive strategies have been proposed, with a particular emphasis on safeguarding language modality. However, in practical applications, threats in the vision modality, particularly in tasks involving the editing of real-world images, present heightened security risks as they can easily infringe upon the rights of the image owner. Therefore, this paper employs a method named typographic attack to reveal that various image generation models are also susceptible to threats within the vision modality. Furthermore, we also evaluate the defense performance of various existing methods when facing threats in the vision modality and uncover their ineffectiveness. Finally, we propose the Vision Modal Threats in Image Generation Models (VMT-IGMs) dataset, which would serve as a baseline for evaluating the vision modality vulnerability of various image generation models.
Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Builds on 50 of its 63 references that are in the map. First posted on arXiv 7 Dec 2024.
Builds on
50 of 63 references.
References · 50
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2020Denoising Diffusion Probabilistic Modelscited by 21,076
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2023GPT-4 Technical Reportcited by 18,396
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2023Visual Instruction Tuningcited by 7,869
- 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,058
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
- 2023BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Modelscited by 6,137
- 2022Generative Adversarial Networkscited by 5,627
- 2023Improved Baselines with Visual Instruction Tuningcited by 4,418
- 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,356
38 more
- 2024Scaling Rectified Flow Transformers for High-Resolution Image Synthesiscited by 4,181
- 2017Progressive Growing of GANs for Improved Quality, Stability, and Variationcited by 2,988
- 2023InstructBLIP: Towards General-purpose Vision-Language Models with Instruction Tuningcited by 2,876
- 2023MiniGPT-4: Enhancing Vision-Language Understanding with Advanced Large Language Modelscited by 2,711
- 2022InstructPix2Pix: Learning to Follow Image Editing Instructionscited by 2,611
- 2023IP-Adapter: Text Compatible Image Prompt Adapter for Text-to-Image Diffusion Modelscited by 1,464
- 2019Generating Diverse High-Fidelity Images with VQ-VAE-2cited by 1,387
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
- 2023Generative Multimodal Models are In-Context Learnerscited by 446
- 2022A Holistic Approach to Undesired Content Detection in the Real Worldcited by 356
- 2022Inversion-Based Style Transfer with Diffusion Modelscited by 291
- 2022Red-Teaming the Stable Diffusion Safety Filtercited by 264
- 2023Style Injection in Diffusion: A Training-free Approach for Adapting Large-scale Diffusion Models for Style Transfercited by 196
- 2023SneakyPrompt: Jailbreaking Text-to-image Generative Modelscited by 189
- 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Modelscited by 168
- 2023Adversarial Example Does Good: Preventing Painting Imitation from Diffusion Models via Adversarial Examplescited by 167
- 2023Raising the Cost of Malicious AI-Powered Image Editingcited by 163
- 2023Shifting Attention to Relevance: Towards the Predictive Uncertainty Quantification of Free-Form Large Language Modelscited by 150
- 2023TrojDiff: Trojan Attacks on Diffusion Models with Diverse Targetscited by 88
- 2024Controllable Generation with Text-to-Image Diffusion Models: A Surveycited by 83
- 2024Jailbreaking Prompt Attack: A Controllable Adversarial Attack against Diffusion Modelscited by 72
- 2024Latent Guard: a Safety Framework for Text-to-image Generationcited by 71
- 2023Self-Discovering Interpretable Diffusion Latent Directions for Responsible Text-to-Image Generationcited by 69
- 2023VillanDiffusion: A Unified Backdoor Attack Framework for Diffusion Modelscited by 68
- 2023Contrastive Denoising Score for Text-guided Latent Diffusion Image Editingcited by 49
- 2023White-box Membership Inference Attacks against Diffusion Modelscited by 42
- 2022AT-DDPM: Restoring Faces degraded by Atmospheric Turbulence using Denoising Diffusion Probabilistic Modelscited by 34
- 2018Information Constraints on Auto-Encoding Variational Bayescited by 33
- 2023All but One: Surgical Concept Erasing with Model Preservation in Text-to-Image Diffusion Modelscited by 33
- 2023Elijah: Eliminating Backdoors Injected in Diffusion Models via Distribution Shiftcited by 31
- 2023Defense-Prefix for Preventing Typographic Attacks on CLIPcited by 24
- 2020Defending against Backdoor Attack on Deep Neural Networkscited by 22
- 2023GCD-DDPM: A Generative Change Detection Model Based on Difference-Feature Guided DDPMcited by 21
- 2024Which Model Generated This Image? A Model-Agnostic Approach for Origin Attributioncited by 16
- 2023SPD-DDPM: Denoising Diffusion Probabilistic Models in the Symmetric Positive Definite Spacecited by 14
- 2024Multimodal Pragmatic Jailbreak on Text-to-image Modelscited by 13
- 2024Dreamguider: Improved Training free Diffusion-based Conditional Generationcited by 4
- 2023RBFormer: Improve Adversarial Robustness of Transformer by Robust Biascited by 3
Built on by
Citing papers per year: 2025: 3; 2026: 4.
7 papers.
- 2025ShieldGemma 2: Robust and Tractable Image Content Moderationcited by 28
- 2025Jailbreak-AudioBench: In-Depth Evaluation and Analysis of Jailbreak Threats for Large Audio Language Modelscited by 23
- 2026VII: Visual Instruction Injection for Jailbreaking Image-to-Video Generation Modelscited by 7
- 2026TP-Blend: Textual-Prompt Attention Pairing for Precise Object-Style Blending in Diffusion Modelscited by 4
- 2025Rethinking Efficient Mixture-of-Experts for Remote Sensing Modality-Missing Classificationcited by 2
- 2026SafeRoPE: Risk-specific Head-wise Embedding Rotation for Safe Generation in Rectified Flow Transformerscited by 2
- 2026Unified Safe In-context Image Generation in Multimodal Diffusion Transformers via Restricting Unsafe Information Flowscited by 0
- 2026Unified Safe In-context Image Generation in Multimodal Diffusion Transformers via Restricting Unsafe Information Flows5 Jun 2026
- 2026SafeRoPE: Risk-specific Head-wise Embedding Rotation for Safe Generation in Rectified Flow Transformers2 Apr 2026
- 2026VII: Visual Instruction Injection for Jailbreaking Image-to-Video Generation Models24 Feb 2026
- 2026TP-Blend: Textual-Prompt Attention Pairing for Precise Object-Style Blending in Diffusion Models12 Jan 2026
- 2025Rethinking Efficient Mixture-of-Experts for Remote Sensing Modality-Missing Classification14 Nov 2025
- 2025ShieldGemma 2: Robust and Tractable Image Content Moderation1 Apr 2025
- 2025Jailbreak-AudioBench: In-Depth Evaluation and Analysis of Jailbreak Threats for Large Audio Language Models23 Jan 2025