mlsanityData to 7 Oct 2026

How does Watermarking Affect Visual Language Models in Document Understanding?

arXiv 2504.01048 ↗First posted 1 Apr 2025cs.CV cs.CR cs.LGcited by 1

On the map: Multimodal LLMs / vision-language models → VLM benchmarks and visual reasoning

also in 1 more
Abstract (arXiv)

Visual Language Models (VLMs) have become foundational models for document understanding tasks, widely used in the processing of complex multimodal documents across domains such as finance, law, and academia. However, documents often contain noise-like information, such as watermarks, which inevitably leads us to inquire: Do watermarks degrade the performance of VLMs in document understanding? To address this, we propose a novel evaluation framework to investigate the effect of visible watermarks on VLMs performance. We takes into account various factors, including different types of document data, the positions of watermarks within documents and variations in watermark content. Our experimental results reveal that VLMs performance can be significantly compromised by watermarks, with performance drop rates reaching up to 36%. We discover that scattered watermarks cause stronger interference than centralized ones, and that semantic contents in watermarks creates greater disruption than simple visual occlusion. Through attention mechanism analysis and embedding similarity examination, we find that the performance drops are mainly attributed to that watermarks 1) force widespread attention redistribution, and 2) alter semantic representation in the embedding space. Our research not only highlights significant challenges in deploying VLMs for document understanding, but also provides insights towards developing robust inference mechanisms on watermarked documents.

Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in VLM benchmarks and visual reasoning, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 17 of its 25 references that are in the map. First posted on arXiv 1 Apr 2025.

Builds on

17 of 25 references.

References · 17

  1. 2023Improved Baselines with Visual Instruction Tuningcited by 4,362
  2. 2024Expanding Performance Boundaries of Open-Source Multimodal Models with Model, Data, and Test-Time Scalingcited by 1,573
  3. 2023mPLUG-Owl: Modularization Empowers Large Language Models with Multimodalitycited by 1,038
  4. 2023On Evaluating Adversarial Robustness of Large Vision-Language Modelscited by 281
  5. 2023PromptRobust: Towards Evaluating the Robustness of Large Language Models on Adversarial Promptscited by 218
  6. 2024TextMonkey: An OCR-Free Large Multimodal Model for Understanding Documentcited by 173
  7. 2023mPLUG-DocOwl: Modularized Multimodal Large Language Model for Document Understandingcited by 167
  8. 2024mPLUG-DocOwl2: High-resolution Compressing for OCR-free Multi-page Document Understandingcited by 113
  9. 2021BROS: A Pre-trained Language Model Focusing on Text and Layout for Better Key Information Extraction from Documentscited by 104
  10. 2020Spatial Dependency Parsing for Semi-Structured Document Information Extractioncited by 65
  11. 2023Evaluating the Instruction-Following Robustness of Large Language Models to Prompt Injectioncited by 53
  12. 2024VisDoM: Multi-Document QA with Visually Rich Elements Using Multimodal Retrieval-Augmented Generationcited by 40
5 more
  1. 2024Enhancing Visual Document Understanding with Contrastive Learning in Large Visual-Language Modelscited by 30
  2. 2022Benchmarking Robustness of Multimodal Image-Text Models under Distribution Shiftcited by 24
  3. 2024"Not Aligned" is Not "Malicious": Being Careful about Hallucinations of Large Language Models' Jailbreakcited by 23
  4. 2025Mitigating Lost-in-Retrieval Problems in Retrieval Augmented Multi-Hop Question Answeringcited by 22
  5. 2024MVTamperBench: Evaluating Robustness of Vision-Language Modelscited by 11

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2026WMVLM: Evaluating Diffusion Model Image Watermarking via Vision-Language Models
  2. 2026Responses Fall Short of Understanding: Revealing the Gap between Internal Representations and Responses in Visual Document Understanding
  3. 2026Do VLMs Read or Rewrite? On Transcription Faithfulness in Vision-Language Models
  4. 2026Retrieval Heads Meet Vision: Uncovering How VLMs Locate and Extract Visual Information
  5. 2024What Do VLMs NOTICE? A Mechanistic Interpretability Pipeline for Gaussian-Noise-free Text-Image Corruption and Evaluation
  6. 2026AGMark: Attention-Guided Dynamic Watermarking for Large Vision-Language Models
  7. 2026VISTA-Bench: Do Vision-Language Models Really Understand Visualized Text as Well as Pure Text?
  8. 2023WatME: Towards Lossless Watermarking Through Lexical Redundancy