mlsanityData to 14 Oct 2026

Blind Spot Navigation: Evolutionary Discovery of Sensitive Semantic Concepts for LVLMs

arXiv 2505.15265 ↗First posted 21 May 2025cs.CV cs.AI cs.CRcited by 0

Not on the map. Why?

Abstract (arXiv)

Adversarial attacks aim to generate malicious inputs that mislead deep models, but beyond causing model failure, they cannot provide certain interpretable information such as ``textitWhat content in inputs make models more likely to fail?'' However, this information is crucial for researchers to specifically improve model robustness. Recent research suggests that models may be particularly sensitive to certain semantics in visual inputs (such as ``wet,'' ``foggy''), making them prone to errors. Inspired by this, in this paper we conducted the first exploration on large vision-language models (LVLMs) and found that LVLMs indeed are susceptible to hallucinations and various errors when facing specific semantic concepts in images. To efficiently search for these sensitive concepts, we integrated large language models (LLMs) and text-to-image (T2I) models to propose a novel semantic evolution framework. Randomly initialized semantic concepts undergo LLM-based crossover and mutation operations to form image descriptions, which are then converted by T2I models into visual inputs for LVLMs. The task-specific performance of LVLMs on each input is quantified as fitness scores for the involved semantics and serves as reward signals to further guide LLMs in exploring concepts that induce LVLMs. Extensive experiments on seven mainstream LVLMs and two multimodal tasks demonstrate the effectiveness of our method. Additionally, we provide interesting findings about the sensitive semantics of LVLMs, aiming to inspire further in-depth research.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 32 of its 43 references that are in the map. First posted on arXiv 21 May 2025.

Builds on

32 of 43 references.

References · 32

  1. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
  2. 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
  3. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
  4. 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,170
  5. 2023Visual Instruction Tuningcited by 7,869
  6. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  7. 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
  8. 2023BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Modelscited by 6,137
  9. 2023Improved Baselines with Visual Instruction Tuningcited by 4,418
  10. 2022Flamingo: a Visual Language Model for Few-Shot Learningcited by 4,386
  11. 2024Qwen2-VL: Enhancing Vision-Language Model's Perception of the World at Any Resolutioncited by 4,234
  12. 2021GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Modelscited by 3,614
20 more
  1. 2023InternVL: Scaling up Vision Foundation Models and Aligning for Generic Visual-Linguistic Taskscited by 2,565
  2. 2023ShareGPT4V: Improving Large Multi-Modal Models with Better Captionscited by 1,005
  3. 2021Multimodal Few-Shot Learning with Frozen Language Modelscited by 661
  4. 2023PandaGPT: One Model To Instruction-Follow Them Allcited by 334
  5. 2023Visual Adversarial Examples Jailbreak Aligned Large Language Modelscited by 328
  6. 2023On Evaluating Adversarial Robustness of Large Vision-Language Modelscited by 284
  7. 2023How Robust is Google's Bard to Adversarial Image Attacks?cited by 183
  8. 2023On the Adversarial Robustness of Multi-Modal Foundation Modelscited by 145
  9. 2022Towards Adversarial Attack on Vision-Language Pre-training Modelscited by 144
  10. 2023Set-level Guidance Attack: Boosting Adversarial Transferability of Vision-Language Pre-training Modelscited by 108
  11. 2023AdvCLIP: Downstream-agnostic Adversarial Examples in Multimodal Contrastive Learningcited by 103
  12. 2024Evolutionary Computation in the Era of Large Language Model: Survey and Roadmapcited by 90
  13. 2024A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trendscited by 84
  14. 2024Benchmarking and Improving Detail Image Captioncited by 81
  15. 2023VLATTACK: Multimodal Adversarial Attacks on Vision-Language Tasks via Pre-trained Modelscited by 68
  16. 2023FACTUAL: A Benchmark for Faithful and Consistent Textual Scene Graph Parsingcited by 50
  17. 2023LANCE: Stress-testing Visual Models by Generating Language-guided Counterfactual Imagescited by 46
  18. 2024Does Representation Matter? Exploring Intermediate Layers in Large Language Modelscited by 34
  19. 2024Unbridled Icarus: A Survey of the Potential Perils of Image Inputs in Multimodal Large Language Model Securitycited by 19
  20. 2024Natural Language Induced Adversarial Imagescited by 4

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026Two Sides of the Same Coin: Co-Evolving Search for Cross-Task Attacks on Vision-Language Models
  2. 2026It Takes Little to Rewrite Perception: Targeted Semantic Substitution in Vision-Language Models at ε≤ 4/255
  3. 2026Phantasia: Context-Adaptive Backdoors in Vision Language Models
  4. 2024Towards Adversarially Robust Vision-Language Models: Insights from Design Choices and Prompt Formatting Techniques
  5. 2025A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations
  6. 2026Breaking the weakest link to evade vision language models
  7. 2025High-Entropy Tokens as Multimodal Failure Points in Vision-Language Models
  8. 2025MVI-Bench: A Comprehensive Benchmark for Evaluating Robustness to Misleading Visual Inputs in LVLMs