Video-SafetyBench: A Benchmark for Safety Evaluation of Video LVLMs
On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness
Abstract (arXiv)
The increasing deployment of Large Vision-Language Models (LVLMs) raises safety concerns under potential malicious inputs. However, existing multimodal safety evaluations primarily focus on model vulnerabilities exposed by static image inputs, ignoring the temporal dynamics of video that may induce distinct safety risks. To bridge this gap, we introduce Video-SafetyBench, the first comprehensive benchmark designed to evaluate the safety of LVLMs under video-text attacks. It comprises 2,264 video-text pairs spanning 48 fine-grained unsafe categories, each pairing a synthesized video with either a harmful query, which contains explicit malice, or a benign query, which appears harmless but triggers harmful behavior when interpreted alongside the video. To generate semantically accurate videos for safety evaluation, we design a controllable pipeline that decomposes video semantics into subject images (what is shown) and motion text (how it moves), which jointly guide the synthesis of query-relevant videos. To effectively evaluate uncertain or borderline harmful outputs, we propose RJScore, a novel LLM-based metric that incorporates the confidence of judge models and human-aligned decision threshold calibration. Extensive experiments show that benign-query video composition achieves average attack success rates of 67.2%, revealing consistent vulnerabilities to video-induced attacks. We believe Video-SafetyBench will catalyze future research into video-based safety evaluation and defense strategies.
Key facts. Cited by 28 papers in the map (data through 14 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 55 of its 67 references that are in the map. First posted on arXiv 17 May 2025.
Builds on
55 of 67 references.
Closest ancestors · 11
Same direction, newest first
- 2025Distraction is All You Need for Multimodal Large Language Model Jailbreaking15 Feb
- 2024VLSBench: Unveiling Visual Leakage in Multimodal Safety29 Nov
- 2024Exploring Visual Vulnerabilities via Multi-Loss Adversarial Search for Jailbreaking Vision-Language Models27 Nov
- 2024Llama Guard 3 Vision: Safeguarding Human-AI Image Understanding Conversations15 Nov
- 2024MLLMGuard: A Multi-dimensional Safety Evaluation Suite for Multimodal Large Language Models11 Jun
- 2024MultiTrust: A Comprehensive Benchmark Towards Trustworthy Multimodal Large Language Models11 Jun
- 2024JailBreakV: A Benchmark for Assessing the Robustness of MultiModal Large Language Models against Jailbreak Attacks3 Apr
- 2024Images are Achilles' Heel of Alignment: Exploiting Visual Vulnerabilities for Jailbreaking Multimodal Large Language Models14 Mar
- 2023MM-SafetyBench: A Benchmark for Safety Evaluation of Multimodal Large Language Models29 Nov
- 2023FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts9 Nov
- 2023Jailbreak in pieces: Compositional Adversarial Attacks on Multi-Modal Language Models26 Jul
Other references · 44
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2023Visual Instruction Tuningcited by 7,869
- 2025Qwen2.5-VL Technical Reportcited by 5,587
- 2024Qwen2.5 Technical Reportcited by 4,942
- 2024Qwen2-VL: Enhancing Vision-Language Model's Perception of the World at Any Resolutioncited by 4,234
- 2023Qwen Technical Reportcited by 3,344
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
- 2024LLaVA-OneVision: Easy Visual Task Transfercited by 2,719
32 more
- 2023InternVL: Scaling up Vision Foundation Models and Aligning for Generic Visual-Linguistic Taskscited by 2,565
- 2023Qwen-VL: A Versatile Vision-Language Model for Understanding, Localization, Text Reading, and Beyondcited by 2,224
- 2024Expanding Performance Boundaries of Open-Source Multimodal Models with Model, Data, and Test-Time Scalingcited by 1,599
- 2023Video-LLaMA: An Instruction-tuned Audio-Visual Language Model for Video Understandingcited by 1,471
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
- 2023Video-LLaVA: Learning United Visual Representation by Alignment Before Projectioncited by 1,402
- 2023MVBench: A Comprehensive Multi-modal Video Understanding Benchmarkcited by 1,109
- 2024MiniCPM-V: A GPT-4V Level MLLM on Your Phonecited by 1,079
- 2023Video-ChatGPT: Towards Detailed Video Understanding via Large Vision and Language Modelscited by 1,062
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 860
- 2024VideoLLaMA 2: Advancing Spatial-Temporal Modeling and Audio Understanding in Video-LLMscited by 771
- 2023Animate Anyone: Consistent and Controllable Image-to-Video Synthesis for Character Animationcited by 688
- 2024LLaVA-NeXT-Interleave: Tackling Multi-image, Video, and 3D in Large Multimodal Modelscited by 584
- 2024JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Modelscited by 536
- 2025VideoLLaMA 3: Frontier Multimodal Foundation Models for Image and Video Understandingcited by 518
- 2024Evaluating Text-to-Visual Generation with Image-to-Text Generationcited by 474
- 2024TempCompass: Do Video LLMs Really Understand Videos?cited by 363
- 2024InternVideo2: Scaling Foundation Models for Multimodal Video Understandingcited by 317
- 2024mPLUG-Owl3: Towards Long Image-Sequence Understanding in Multi-Modal Large Language Modelscited by 291
- 2025InternVideo2.5: Empowering Video MLLMs with Long and Rich Context Modelingcited by 211
- 2023Image Hijacks: Adversarial Images can Control Generative Models at Runtimecited by 172
- 2024HourVideo: 1-Hour Video-Language Understandingcited by 113
- 2023How Many Unicorns Are in This Image? A Safety Evaluation Benchmark for Vision LLMscited by 108
- 2021Make It Move: Controllable Image-to-Video Generation with Text Descriptionscited by 88
- 2024Introducing v0.5 of the AI Safety Benchmark from MLCommonscited by 62
- 2024MMFakeBench: A Mixed-Source Multimodal Misinformation Detection Benchmark for LVLMscited by 61
- 2024VideoTetris: Towards Compositional Text-to-Video Generationcited by 51
- 2025Playing the Fool: Jailbreaking LLMs and Multimodal LLMs with Out-of-Distribution Strategycited by 44
- 2024SafeSora: Towards Safety Alignment of Text2Video Generation via a Human Preference Datasetcited by 35
- 2024Jailbreak Attacks and Defenses against Multimodal Generative Models: A Surveycited by 32
- 2024ActionAtlas: A VideoQA Benchmark for Domain-specialized Action Recognitioncited by 21
- 2023A Large-scale Study of Spatiotemporal Representation Learning with a New Benchmark on Action Recognitioncited by 14
Built on by
Citing papers per year: 2025: 6; 2026: 22.
28 papers.
Sort:
By area:
- 2025Omni-SafetyBench: A Benchmark for Safety Evaluation of Audio-Visual Large Language Modelscited by 18
- 2025Are Vision-Language Models Safe in the Wild? A Meme-Based Benchmark Studycited by 12
- 2025OmniGuard: Unified Omni-Modal Guardrails with Deliberate Reasoningcited by 7
- 2025VideoRewardBench: Comprehensive Evaluation of Multimodal Reward Models for Video Understandingcited by 6
- 2026Omni-Safety under Cross-Modality Conflict: Vulnerabilities, Dynamics Mechanisms and Efficient Alignmentcited by 6
- 2026PaSBench-Video: A Streaming Video Benchmark for Proactive Safety Warningcited by 3
- 2026GuardReasoner-Omni: A Reasoning-based Multi-modal Guardrail for Text, Image, Video, and Audiocited by 2
- 2026Risk Awareness Injection: Calibrating Vision-Language Models for Safety without Compromising Utilitycited by 2
- 2026SafeGuard: A Multi-Agent Perception-Reasoning Framework for Social-Risk AI-Generated Video Detectioncited by 2
- 2025Benchmarking the Trustworthiness in Multimodal LLMs for Video Understandingcited by 1
- 2025AVFakeBench: A Comprehensive Audio-Video Forgery Detection Benchmark for AV-LMMscited by 1
- 2026GenVideoLens: Where LVLMs Fall Short in AI-Generated Video Detection?cited by 1
16 more
- 2026Benchmarking Living-Screen-Native GUI Agents on Short-Video Platformscited by 1
- 2026EgoSafetyBench: A Diagnostic Egocentric Video Benchmark for Evaluating Embodied VLMs as Runtime Safety Guardscited by 1
- 2026ICAT: Incident-Case-Grounded Adaptive Testing for Physical-Risk Prediction in Embodied World Modelscited by 0
- 2026Jailbreaking Multimodal Large Language Models using Multi-Clip Videocited by 0
- 2026UNIVID: Unified Vision-Language Model for Video Moderationcited by 0
- 2026HarmVideoBench: Benchmarking Harmful Video Understanding in Large Multimodal Modelscited by 0
- 2026Harnessing Textual Refusal Directions for Multimodal Safetycited by 0
- 2026V-DEAL: Diagnosing Video Safety De-Calibration as an Understanding-Refusal Coupling Failurecited by 0
- 2026Child-Oriented AIGC Video Risk Reviewing: A Benchmark and Knowledge-Supported Iterative Reasoning Frameworkcited by 0
- 2026SafeNexus: Discovering and Steering Modality-Universal Safety Neurons in MLLMscited by 0
- 2026From Sports to Safety: Benchmarking Proactive Risk Inference in MLLMscited by 0
- 2026COMIC: Reference-Aware Safety Gating for Multimodal Large Language Modelscited by 0
- 2026TempJail: Temporal Jailbreak Attacks against Image-to-Video Generation Modelscited by 0
- 2026Distributed Implicit Harm: A Compositional Safety Blind Spot in MLLM-Based Video Moderationcited by 0
- 2026DIVA: Exploiting Cross-Step Conditional Propagation for Visual Jailbreaks in Discrete Diffusion Vision-Language Modelscited by 0
- 2026Safety for Whom? Benchmarking Understanding Beyond Refusal in Egocentric Multimodal Assistantscited by 0
- 2026Safety for Whom? Benchmarking Understanding Beyond Refusal in Egocentric Multimodal Assistants13 Oct 2026
- 2026DIVA: Exploiting Cross-Step Conditional Propagation for Visual Jailbreaks in Discrete Diffusion Vision-Language Models1 Sep 2026
- 2026Distributed Implicit Harm: A Compositional Safety Blind Spot in MLLM-Based Video Moderation31 Aug 2026
- 2026TempJail: Temporal Jailbreak Attacks against Image-to-Video Generation Models27 Aug 2026
- 2026COMIC: Reference-Aware Safety Gating for Multimodal Large Language Models18 Aug 2026
- 2026From Sports to Safety: Benchmarking Proactive Risk Inference in MLLMs6 Aug 2026
- 2026SafeNexus: Discovering and Steering Modality-Universal Safety Neurons in MLLMs31 Jul 2026
- 2026V-DEAL: Diagnosing Video Safety De-Calibration as an Understanding-Refusal Coupling Failure23 Jul 2026
- 2026Child-Oriented AIGC Video Risk Reviewing: A Benchmark and Knowledge-Supported Iterative Reasoning Framework21 Jul 2026
- 2026SafeGuard: A Multi-Agent Perception-Reasoning Framework for Social-Risk AI-Generated Video Detection3 Jul 2026
- 2026EgoSafetyBench: A Diagnostic Egocentric Video Benchmark for Evaluating Embodied VLMs as Runtime Safety Guards30 Jun 2026
- 2026Harnessing Textual Refusal Directions for Multimodal Safety30 Jun 2026
16 more
- 2026HarmVideoBench: Benchmarking Harmful Video Understanding in Large Multimodal Models25 Jun 2026
- 2026UNIVID: Unified Vision-Language Model for Video Moderation4 Jun 2026
- 2026Benchmarking Living-Screen-Native GUI Agents on Short-Video Platforms3 Jun 2026
- 2026PaSBench-Video: A Streaming Video Benchmark for Proactive Safety Warning1 Jun 2026
- 2026Jailbreaking Multimodal Large Language Models using Multi-Clip Video1 Jun 2026
- 2026ICAT: Incident-Case-Grounded Adaptive Testing for Physical-Risk Prediction in Embodied World Models31 Mar 2026
- 2026GenVideoLens: Where LVLMs Fall Short in AI-Generated Video Detection?19 Mar 2026
- 2026Omni-Safety under Cross-Modality Conflict: Vulnerabilities, Dynamics Mechanisms and Efficient Alignment10 Feb 2026
- 2026Risk Awareness Injection: Calibrating Vision-Language Models for Safety without Compromising Utility3 Feb 2026
- 2026GuardReasoner-Omni: A Reasoning-based Multi-modal Guardrail for Text, Image, Video, and Audio3 Feb 2026
- 2025OmniGuard: Unified Omni-Modal Guardrails with Deliberate Reasoning2 Dec 2025
- 2025AVFakeBench: A Comprehensive Audio-Video Forgery Detection Benchmark for AV-LMMs26 Nov 2025
- 2025VideoRewardBench: Comprehensive Evaluation of Multimodal Reward Models for Video Understanding30 Aug 2025
- 2025Omni-SafetyBench: A Benchmark for Safety Evaluation of Audio-Visual Large Language Models10 Aug 2025
- 2025Benchmarking the Trustworthiness in Multimodal LLMs for Video Understanding14 Jun 2025
- 2025Are Vision-Language Models Safe in the Wild? A Meme-Based Benchmark Study21 May 2025
- 2025Are Vision-Language Models Safe in the Wild? A Meme-Based Benchmark Studycited by 12
- 2025VideoRewardBench: Comprehensive Evaluation of Multimodal Reward Models for Video Understandingcited by 6
- 2025Benchmarking the Trustworthiness in Multimodal LLMs for Video Understandingcited by 1
- 2026EgoSafetyBench: A Diagnostic Egocentric Video Benchmark for Evaluating Embodied VLMs as Runtime Safety Guardscited by 1
- 2026Jailbreaking Multimodal Large Language Models using Multi-Clip Videocited by 0
- 2026UNIVID: Unified Vision-Language Model for Video Moderationcited by 0
- 2026HarmVideoBench: Benchmarking Harmful Video Understanding in Large Multimodal Modelscited by 0
- 2026SafeNexus: Discovering and Steering Modality-Universal Safety Neurons in MLLMscited by 0
- 2026COMIC: Reference-Aware Safety Gating for Multimodal Large Language Modelscited by 0
- 2026Distributed Implicit Harm: A Compositional Safety Blind Spot in MLLM-Based Video Moderationcited by 0
- 2026DIVA: Exploiting Cross-Step Conditional Propagation for Visual Jailbreaks in Discrete Diffusion Vision-Language Modelscited by 0
- 2026DIVA: Exploiting Cross-Step Conditional Propagation for Visual Jailbreaks in Discrete Diffusion Vision-Language Models1 Sep 2026
- 2026Distributed Implicit Harm: A Compositional Safety Blind Spot in MLLM-Based Video Moderation31 Aug 2026
- 2026COMIC: Reference-Aware Safety Gating for Multimodal Large Language Models18 Aug 2026
- 2026SafeNexus: Discovering and Steering Modality-Universal Safety Neurons in MLLMs31 Jul 2026
- 2026EgoSafetyBench: A Diagnostic Egocentric Video Benchmark for Evaluating Embodied VLMs as Runtime Safety Guards30 Jun 2026
- 2026HarmVideoBench: Benchmarking Harmful Video Understanding in Large Multimodal Models25 Jun 2026
- 2026UNIVID: Unified Vision-Language Model for Video Moderation4 Jun 2026
- 2026Jailbreaking Multimodal Large Language Models using Multi-Clip Video1 Jun 2026
- 2025VideoRewardBench: Comprehensive Evaluation of Multimodal Reward Models for Video Understanding30 Aug 2025
- 2025Benchmarking the Trustworthiness in Multimodal LLMs for Video Understanding14 Jun 2025
- 2025Are Vision-Language Models Safe in the Wild? A Meme-Based Benchmark Study21 May 2025
- 2025OmniGuard: Unified Omni-Modal Guardrails with Deliberate Reasoningcited by 7
- 2026Risk Awareness Injection: Calibrating Vision-Language Models for Safety without Compromising Utilitycited by 2
- 2026SafeGuard: A Multi-Agent Perception-Reasoning Framework for Social-Risk AI-Generated Video Detectioncited by 2
- 2026Child-Oriented AIGC Video Risk Reviewing: A Benchmark and Knowledge-Supported Iterative Reasoning Frameworkcited by 0
- 2026Child-Oriented AIGC Video Risk Reviewing: A Benchmark and Knowledge-Supported Iterative Reasoning Framework21 Jul 2026
- 2026SafeGuard: A Multi-Agent Perception-Reasoning Framework for Social-Risk AI-Generated Video Detection3 Jul 2026
- 2026Risk Awareness Injection: Calibrating Vision-Language Models for Safety without Compromising Utility3 Feb 2026
- 2025OmniGuard: Unified Omni-Modal Guardrails with Deliberate Reasoning2 Dec 2025
- 2025Omni-SafetyBench: A Benchmark for Safety Evaluation of Audio-Visual Large Language Modelscited by 18
- 2026GuardReasoner-Omni: A Reasoning-based Multi-modal Guardrail for Text, Image, Video, and Audiocited by 2
- 2026From Sports to Safety: Benchmarking Proactive Risk Inference in MLLMscited by 0
- 2026TempJail: Temporal Jailbreak Attacks against Image-to-Video Generation Modelscited by 0
- 2026TempJail: Temporal Jailbreak Attacks against Image-to-Video Generation Models27 Aug 2026
- 2026From Sports to Safety: Benchmarking Proactive Risk Inference in MLLMs6 Aug 2026
- 2026GuardReasoner-Omni: A Reasoning-based Multi-modal Guardrail for Text, Image, Video, and Audio3 Feb 2026
- 2025Omni-SafetyBench: A Benchmark for Safety Evaluation of Audio-Visual Large Language Models10 Aug 2025
- 2026Omni-Safety under Cross-Modality Conflict: Vulnerabilities, Dynamics Mechanisms and Efficient Alignmentcited by 6
- 2026PaSBench-Video: A Streaming Video Benchmark for Proactive Safety Warningcited by 3
- 2025AVFakeBench: A Comprehensive Audio-Video Forgery Detection Benchmark for AV-LMMscited by 1
- 2026GenVideoLens: Where LVLMs Fall Short in AI-Generated Video Detection?cited by 1
- 2026Harnessing Textual Refusal Directions for Multimodal Safetycited by 0
- 2026Safety for Whom? Benchmarking Understanding Beyond Refusal in Egocentric Multimodal Assistantscited by 0
- 2026Safety for Whom? Benchmarking Understanding Beyond Refusal in Egocentric Multimodal Assistants13 Oct 2026
- 2026Harnessing Textual Refusal Directions for Multimodal Safety30 Jun 2026
- 2026PaSBench-Video: A Streaming Video Benchmark for Proactive Safety Warning1 Jun 2026
- 2026GenVideoLens: Where LVLMs Fall Short in AI-Generated Video Detection?19 Mar 2026
- 2026Omni-Safety under Cross-Modality Conflict: Vulnerabilities, Dynamics Mechanisms and Efficient Alignment10 Feb 2026
- 2025AVFakeBench: A Comprehensive Audio-Video Forgery Detection Benchmark for AV-LMMs26 Nov 2025
Similar, not cited
Close in wording, no citation either way
- 2025From Evaluation to Defense: Advancing Safety in Video Large Language Models
- 2025SafeVid: Toward Safety Aligned Video Large Multimodal Models
- 2024T2VSafetyBench: Evaluating the Safety of Text-to-Video Generative Models
- 2025HoliSafe: Holistic Safety Benchmarking and Modeling for Vision-Language Model
- 2026SafeGen-Bench: Benchmarking Safety in Image-Conditioned Text-to-Video Generation
- 2025Safe Vision-Language Models via Unsafe Weights Manipulation
- 2025Rethinking Bottlenecks in Safety Fine-Tuning of Vision Language Models
- 2026Lingua-SafetyBench: A Benchmark for Safety Evaluation of Multilingual Vision-Language Models