MDIT-Bench: Evaluating the Dual-Implicit Toxicity in Large Multimodal Models
On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness
Abstract (arXiv)
The widespread use of Large Multimodal Models (LMMs) has raised concerns about model toxicity. However, current research mainly focuses on explicit toxicity, with less attention to some more implicit toxicity regarding prejudice and discrimination. To address this limitation, we introduce a subtler type of toxicity named dual-implicit toxicity and a novel toxicity benchmark termed MDIT-Bench: Multimodal Dual-Implicit Toxicity Benchmark. Specifically, we first create the MDIT-Dataset with dual-implicit toxicity using the proposed Multi-stage Human-in-loop In-context Generation method. Based on this dataset, we construct the MDIT-Bench, a benchmark for evaluating the sensitivity of models to dual-implicit toxicity, with 317,638 questions covering 12 categories, 23 subcategories, and 780 topics. MDIT-Bench includes three difficulty levels, and we propose a metric to measure the toxicity gap exhibited by the model across them. In the experiment, we conducted MDIT-Bench on 13 prominent LMMs, and the results show that these LMMs cannot handle dual-implicit toxicity effectively. The model's performance drops significantly in hard level, revealing that these LMMs still contain a significant amount of hidden but activatable toxicity. Data are available at https://github.com/nuo1nuo/MDIT-Bench.
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 20 of its 41 references that are in the map. First posted on arXiv 22 May 2025.
Builds on
20 of 41 references.
Closest ancestors · 2
Same direction, newest first
- 2024Multimodal Situational Safety8 Oct
- 2024Safety of Multimodal Large Language Models on Images and Texts1 Feb
Other references · 18
- 2023Improved Baselines with Visual Instruction Tuningcited by 4,418
- 2024Qwen2-VL: Enhancing Vision-Language Model's Perception of the World at Any Resolutioncited by 4,234
- 2024Gemini 1.5: Unlocking multimodal understanding across millions of tokens of contextcited by 3,224
- 2023InstructBLIP: Towards General-purpose Vision-Language Models with Instruction Tuningcited by 2,876
- 2024Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phonecited by 1,917
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,255
- 2024SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Modelscited by 228
- 2021Latent Hatred: A Benchmark for Understanding Implicit Hate Speechcited by 217
- 2024CogVLM2: Visual Language Models for Image and Video Understandingcited by 217
- 2019Exploring Hate Speech Detection in Multimodal Publicationscited by 103
- 2020Toxicity Detection: Does Context Really Matter?cited by 93
- 2023CValues: Measuring the Values of Chinese Large Language Models from Safety to Responsibilitycited by 85
6 more
- 2024GOAT-Bench: Safety Insights to Large Multimodal Models through Meme-Based Social Abusecited by 52
- 2022Parameter-Efficient and Student-Friendly Knowledge Distillationcited by 47
- 2023Queer In AI: A Case Study in Community-Led Participatory AIcited by 34
- 2023ToViLaG: Your Visual-Language Generative Model is Also An Evildoercited by 27
- 2019Towards Robust Toxic Content Classificationcited by 22
- 2024CommonIT: Commonality-Aware Instruction Tuning for Large Language Models via Data Partitionscited by 14
Built on by
Citing papers per year: 2025: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2025ShieldVLM: Safeguarding the Multimodal Implicit Toxicity via Deliberative Reasoning with LVLMs
- 2026Measuring and Mitigating Toxicity in Large Language Models: A Comprehensive Replication Study
- 2024Realistic Evaluation of Toxicity in Large Language Models
- 2025Understanding and Mitigating Toxicity in Image-Text Pretraining Datasets: A Case Study on LLaVA
- 2025Rethinking Toxicity Evaluation in Large Language Models: A Multi-Label Perspective
- 2025Something Just Like TRuST : Toxicity Recognition of Span and Target
- 2024RTP-LX: Can LLMs Evaluate Toxicity in Multilingual Scenarios?
- 2025IF-GUIDE: Influence Function-Guided Detoxification of LLMs