mlsanityData to 14 Oct 2026

Video-SafetyBench: A Benchmark for Safety Evaluation of Video LVLMs

arXiv 2505.11842 ↗First posted 17 May 2025cs.CV cs.CLcited by 28

On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness

Abstract (arXiv)

The increasing deployment of Large Vision-Language Models (LVLMs) raises safety concerns under potential malicious inputs. However, existing multimodal safety evaluations primarily focus on model vulnerabilities exposed by static image inputs, ignoring the temporal dynamics of video that may induce distinct safety risks. To bridge this gap, we introduce Video-SafetyBench, the first comprehensive benchmark designed to evaluate the safety of LVLMs under video-text attacks. It comprises 2,264 video-text pairs spanning 48 fine-grained unsafe categories, each pairing a synthesized video with either a harmful query, which contains explicit malice, or a benign query, which appears harmless but triggers harmful behavior when interpreted alongside the video. To generate semantically accurate videos for safety evaluation, we design a controllable pipeline that decomposes video semantics into subject images (what is shown) and motion text (how it moves), which jointly guide the synthesis of query-relevant videos. To effectively evaluate uncertain or borderline harmful outputs, we propose RJScore, a novel LLM-based metric that incorporates the confidence of judge models and human-aligned decision threshold calibration. Extensive experiments show that benign-query video composition achieves average attack success rates of 67.2%, revealing consistent vulnerabilities to video-induced attacks. We believe Video-SafetyBench will catalyze future research into video-based safety evaluation and defense strategies.

Key facts. Cited by 28 papers in the map (data through 14 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 55 of its 67 references that are in the map. First posted on arXiv 17 May 2025.

Builds on

55 of 67 references.

Closest ancestors · 11

Same direction, newest first

  1. 2025Distraction is All You Need for Multimodal Large Language Model Jailbreaking15 Feb
  2. 2024VLSBench: Unveiling Visual Leakage in Multimodal Safety29 Nov
  3. 2024Exploring Visual Vulnerabilities via Multi-Loss Adversarial Search for Jailbreaking Vision-Language Models27 Nov
  4. 2024Llama Guard 3 Vision: Safeguarding Human-AI Image Understanding Conversations15 Nov
  5. 2024MLLMGuard: A Multi-dimensional Safety Evaluation Suite for Multimodal Large Language Models11 Jun
  6. 2024MultiTrust: A Comprehensive Benchmark Towards Trustworthy Multimodal Large Language Models11 Jun
  7. 2024JailBreakV: A Benchmark for Assessing the Robustness of MultiModal Large Language Models against Jailbreak Attacks3 Apr
  8. 2024Images are Achilles' Heel of Alignment: Exploiting Visual Vulnerabilities for Jailbreaking Multimodal Large Language Models14 Mar
  9. 2023MM-SafetyBench: A Benchmark for Safety Evaluation of Multimodal Large Language Models29 Nov
  10. 2023FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts9 Nov
  11. 2023Jailbreak in pieces: Compositional Adversarial Attacks on Multi-Modal Language Models26 Jul

Other references · 44

  1. 2020Language Models are Few-Shot Learnerscited by 32,419
  2. 2014Microsoft COCO: Common Objects in Contextcited by 17,608
  3. 2024The Llama 3 Herd of Modelscited by 14,715
  4. 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
  5. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
  6. 2023Visual Instruction Tuningcited by 7,869
  7. 2025Qwen2.5-VL Technical Reportcited by 5,587
  8. 2024Qwen2.5 Technical Reportcited by 4,942
  9. 2024Qwen2-VL: Enhancing Vision-Language Model's Perception of the World at Any Resolutioncited by 4,234
  10. 2023Qwen Technical Reportcited by 3,344
  11. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
  12. 2024LLaVA-OneVision: Easy Visual Task Transfercited by 2,719
32 more
  1. 2023InternVL: Scaling up Vision Foundation Models and Aligning for Generic Visual-Linguistic Taskscited by 2,565
  2. 2023Qwen-VL: A Versatile Vision-Language Model for Understanding, Localization, Text Reading, and Beyondcited by 2,224
  3. 2024Expanding Performance Boundaries of Open-Source Multimodal Models with Model, Data, and Test-Time Scalingcited by 1,599
  4. 2023Video-LLaMA: An Instruction-tuned Audio-Visual Language Model for Video Understandingcited by 1,471
  5. 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
  6. 2023Video-LLaVA: Learning United Visual Representation by Alignment Before Projectioncited by 1,402
  7. 2023MVBench: A Comprehensive Multi-modal Video Understanding Benchmarkcited by 1,109
  8. 2024MiniCPM-V: A GPT-4V Level MLLM on Your Phonecited by 1,079
  9. 2023Video-ChatGPT: Towards Detailed Video Understanding via Large Vision and Language Modelscited by 1,062
  10. 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 860
  11. 2024VideoLLaMA 2: Advancing Spatial-Temporal Modeling and Audio Understanding in Video-LLMscited by 771
  12. 2023Animate Anyone: Consistent and Controllable Image-to-Video Synthesis for Character Animationcited by 688
  13. 2024LLaVA-NeXT-Interleave: Tackling Multi-image, Video, and 3D in Large Multimodal Modelscited by 584
  14. 2024JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Modelscited by 536
  15. 2025VideoLLaMA 3: Frontier Multimodal Foundation Models for Image and Video Understandingcited by 518
  16. 2024Evaluating Text-to-Visual Generation with Image-to-Text Generationcited by 474
  17. 2024TempCompass: Do Video LLMs Really Understand Videos?cited by 363
  18. 2024InternVideo2: Scaling Foundation Models for Multimodal Video Understandingcited by 317
  19. 2024mPLUG-Owl3: Towards Long Image-Sequence Understanding in Multi-Modal Large Language Modelscited by 291
  20. 2025InternVideo2.5: Empowering Video MLLMs with Long and Rich Context Modelingcited by 211
  21. 2023Image Hijacks: Adversarial Images can Control Generative Models at Runtimecited by 172
  22. 2024HourVideo: 1-Hour Video-Language Understandingcited by 113
  23. 2023How Many Unicorns Are in This Image? A Safety Evaluation Benchmark for Vision LLMscited by 108
  24. 2021Make It Move: Controllable Image-to-Video Generation with Text Descriptionscited by 88
  25. 2024Introducing v0.5 of the AI Safety Benchmark from MLCommonscited by 62
  26. 2024MMFakeBench: A Mixed-Source Multimodal Misinformation Detection Benchmark for LVLMscited by 61
  27. 2024VideoTetris: Towards Compositional Text-to-Video Generationcited by 51
  28. 2025Playing the Fool: Jailbreaking LLMs and Multimodal LLMs with Out-of-Distribution Strategycited by 44
  29. 2024SafeSora: Towards Safety Alignment of Text2Video Generation via a Human Preference Datasetcited by 35
  30. 2024Jailbreak Attacks and Defenses against Multimodal Generative Models: A Surveycited by 32
  31. 2024ActionAtlas: A VideoQA Benchmark for Domain-specialized Action Recognitioncited by 21
  32. 2023A Large-scale Study of Spatiotemporal Representation Learning with a New Benchmark on Action Recognitioncited by 14

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 6; 2026: 22.

28 papers.

Sort:

By area:

  1. 2025Omni-SafetyBench: A Benchmark for Safety Evaluation of Audio-Visual Large Language Modelscited by 18
  2. 2025Are Vision-Language Models Safe in the Wild? A Meme-Based Benchmark Studycited by 12
  3. 2025OmniGuard: Unified Omni-Modal Guardrails with Deliberate Reasoningcited by 7
  4. 2025VideoRewardBench: Comprehensive Evaluation of Multimodal Reward Models for Video Understandingcited by 6
  5. 2026Omni-Safety under Cross-Modality Conflict: Vulnerabilities, Dynamics Mechanisms and Efficient Alignmentcited by 6
  6. 2026PaSBench-Video: A Streaming Video Benchmark for Proactive Safety Warningcited by 3
  7. 2026GuardReasoner-Omni: A Reasoning-based Multi-modal Guardrail for Text, Image, Video, and Audiocited by 2
  8. 2026Risk Awareness Injection: Calibrating Vision-Language Models for Safety without Compromising Utilitycited by 2
  9. 2026SafeGuard: A Multi-Agent Perception-Reasoning Framework for Social-Risk AI-Generated Video Detectioncited by 2
  10. 2025Benchmarking the Trustworthiness in Multimodal LLMs for Video Understandingcited by 1
  11. 2025AVFakeBench: A Comprehensive Audio-Video Forgery Detection Benchmark for AV-LMMscited by 1
  12. 2026GenVideoLens: Where LVLMs Fall Short in AI-Generated Video Detection?cited by 1
16 more
  1. 2026Benchmarking Living-Screen-Native GUI Agents on Short-Video Platformscited by 1
  2. 2026EgoSafetyBench: A Diagnostic Egocentric Video Benchmark for Evaluating Embodied VLMs as Runtime Safety Guardscited by 1
  3. 2026ICAT: Incident-Case-Grounded Adaptive Testing for Physical-Risk Prediction in Embodied World Modelscited by 0
  4. 2026Jailbreaking Multimodal Large Language Models using Multi-Clip Videocited by 0
  5. 2026UNIVID: Unified Vision-Language Model for Video Moderationcited by 0
  6. 2026HarmVideoBench: Benchmarking Harmful Video Understanding in Large Multimodal Modelscited by 0
  7. 2026Harnessing Textual Refusal Directions for Multimodal Safetycited by 0
  8. 2026V-DEAL: Diagnosing Video Safety De-Calibration as an Understanding-Refusal Coupling Failurecited by 0
  9. 2026Child-Oriented AIGC Video Risk Reviewing: A Benchmark and Knowledge-Supported Iterative Reasoning Frameworkcited by 0
  10. 2026SafeNexus: Discovering and Steering Modality-Universal Safety Neurons in MLLMscited by 0
  11. 2026From Sports to Safety: Benchmarking Proactive Risk Inference in MLLMscited by 0
  12. 2026COMIC: Reference-Aware Safety Gating for Multimodal Large Language Modelscited by 0
  13. 2026TempJail: Temporal Jailbreak Attacks against Image-to-Video Generation Modelscited by 0
  14. 2026Distributed Implicit Harm: A Compositional Safety Blind Spot in MLLM-Based Video Moderationcited by 0
  15. 2026DIVA: Exploiting Cross-Step Conditional Propagation for Visual Jailbreaks in Discrete Diffusion Vision-Language Modelscited by 0
  16. 2026Safety for Whom? Benchmarking Understanding Beyond Refusal in Egocentric Multimodal Assistantscited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2025From Evaluation to Defense: Advancing Safety in Video Large Language Models
  2. 2025SafeVid: Toward Safety Aligned Video Large Multimodal Models
  3. 2024T2VSafetyBench: Evaluating the Safety of Text-to-Video Generative Models
  4. 2025HoliSafe: Holistic Safety Benchmarking and Modeling for Vision-Language Model
  5. 2026SafeGen-Bench: Benchmarking Safety in Image-Conditioned Text-to-Video Generation
  6. 2025Safe Vision-Language Models via Unsafe Weights Manipulation
  7. 2025Rethinking Bottlenecks in Safety Fine-Tuning of Vision Language Models
  8. 2026Lingua-SafetyBench: A Benchmark for Safety Evaluation of Multilingual Vision-Language Models