mlsanityData to 14 Oct 2026

USB: A Comprehensive and Unified Safety Evaluation Benchmark for Multimodal Large Language Models

arXiv 2505.23793 ↗First posted 26 May 2025cs.CR cs.AIcited by 10

On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness

also in 1 more
Abstract (arXiv)

Despite their remarkable achievements and widespread adoption, Multimodal Large Language Models (MLLMs) have revealed significant security vulnerabilities, highlighting the urgent need for robust safety evaluation benchmarks. Existing MLLM safety benchmarks, however, fall short in terms of data quality and coverge, and modal risk combinations, resulting in inflated and contradictory evaluation results, which hinders the discovery and governance of security concerns. Besides, we argue that vulnerabilities to harmful queries and oversensitivity to harmless ones should be considered simultaneously in MLLMs safety evaluation, whereas these were previously considered separately. In this paper, to address these shortcomings, we introduce Unified Safety Benchmarks (USB), which is one of the most comprehensive evaluation benchmarks in MLLM safety. Our benchmark features high-quality queries, extensive risk categories, comprehensive modal combinations, and encompasses both vulnerability and oversensitivity evaluations. From the perspective of two key dimensions: risk categories and modality combinations, we demonstrate that the available benchmarks -- even the union of the vast majority of them -- are far from being truly comprehensive. To bridge this gap, we design a sophisticated data synthesis pipeline that generates extensive, high-quality complementary data addressing previously unexplored aspects. By combining open-source datasets with our synthetic data, our benchmark provides 4 distinct modality combinations for each of the 61 risk sub-categories, covering both English and Chinese across both vulnerability and oversensitivity dimensions.

Key facts. Cited by 10 papers in the map (data through 14 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 48 of its 59 references that are in the map. First posted on arXiv 26 May 2025.

Builds on

48 of 59 references.

Closest ancestors · 17

Same direction, newest first

  1. 2025HiddenDetect: Detecting Jailbreak Attacks against Large Vision-Language Models via Monitoring Hidden States20 Feb
  2. 2025Can't See the Forest for the Trees: Benchmarking Multimodal Safety Awareness for Multimodal LLMs16 Feb
  3. 2025A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations14 Feb
  4. 2025Jailbreaking Multimodal Large Language Models via Shuffle Inconsistency9 Jan
  5. 2024RapGuard: Safeguarding Multimodal Large Language Models via Rationale-aware Defensive Prompting25 Dec
  6. 2024VLSBench: Unveiling Visual Leakage in Multimodal Safety29 Nov
  7. 2024Llama Guard 3 Vision: Safeguarding Human-AI Image Understanding Conversations15 Nov
  8. 2024Multimodal Situational Safety8 Oct
  9. 2024MOSSBench: Is Your Multimodal Language Model Oversensitive to Safe Queries?22 Jun
  10. 2024SPA-VL: A Comprehensive Safety Preference Alignment Dataset for Vision Language Model17 Jun
  11. 2024MLLMGuard: A Multi-dimensional Safety Evaluation Suite for Multimodal Large Language Models11 Jun
  12. 2024Cross-Modal Safety Alignment: Is textual unlearning all you need?27 May
5 more
  1. 2024JailBreakV: A Benchmark for Assessing the Robustness of MultiModal Large Language Models against Jailbreak Attacks3 Apr
  2. 2024Images are Achilles' Heel of Alignment: Exploiting Visual Vulnerabilities for Jailbreaking Multimodal Large Language Models14 Mar
  3. 2024Red Teaming Visual Language Models23 Jan
  4. 2023MM-SafetyBench: A Benchmark for Safety Evaluation of Multimodal Large Language Models29 Nov
  5. 2023FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts9 Nov

Other references · 31

  1. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
  2. 2023GPT-4 Technical Reportcited by 18,396
  3. 2014Microsoft COCO: Common Objects in Contextcited by 17,608
  4. 2023Visual Instruction Tuningcited by 7,869
  5. 2025Qwen2.5-VL Technical Reportcited by 5,587
  6. 2024GPT-4o System Cardcited by 4,588
  7. 2023Improved Baselines with Visual Instruction Tuningcited by 4,418
  8. 2024Qwen2-VL: Enhancing Vision-Language Model's Perception of the World at Any Resolutioncited by 4,234
  9. 2024Scaling Rectified Flow Transformers for High-Resolution Image Synthesiscited by 4,181
  10. 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
  11. 2024Gemini 1.5: Unlocking multimodal understanding across millions of tokens of contextcited by 3,224
  12. 2023A Survey of Large Language Modelscited by 2,576
19 more
  1. 2023InternVL: Scaling up Vision Foundation Models and Aligning for Generic Visual-Linguistic Taskscited by 2,565
  2. 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
  3. 2024ChatGLM: A Family of Large Language Models from GLM-130B to GLM-4 All Toolscited by 1,121
  4. 2024MiniCPM-V: A GPT-4V Level MLLM on Your Phonecited by 1,079
  5. 2024How Far Are We to GPT-4V? Closing the Gap to Commercial Multimodal Models with Open-Source Suitescited by 1,050
  6. 2023CogVLM: Visual Expert for Pretrained Language Modelscited by 708
  7. 2023VILA: On Pre-training for Visual Language Modelscited by 692
  8. 2024R-Judge: Benchmarking Safety Risk Awareness for LLM Agentscited by 288
  9. 2024NVILA: Efficient Frontier Visual Language Modelscited by 209
  10. 2023SafetyBench: Evaluating the Safety of Large Language Modelscited by 199
  11. 2024Safety Fine-Tuning at (Almost) No Cost: A Baseline for Vision Large Language Modelscited by 167
  12. 2023DRESS: Instructing Large Vision-Language Models to Align and Interact with Humans via Natural Language Feedbackcited by 103
  13. 2025A Survey of Graph Retrieval-Augmented Generation for Customized Large Language Modelscited by 88
  14. 2024A Survey on Benchmarks of Multimodal Large Language Modelscited by 82
  15. 2024SafeBench: A Safety Evaluation Framework for Multimodal Large Language Modelscited by 69
  16. 2024Jailbreak Large Vision-Language Models Through Multi-Modal Linkagecited by 62
  17. 2024Entity Alignment with Noisy Annotations from Large Language Modelscited by 22
  18. 2025Equilibrate RLHF: Towards Balancing Helpfulness-Safety Trade-off in Large Language Modelscited by 22
  19. 2024Chinese SafetyQA: A Safety Short-form Factuality Benchmark for Large Language Modelscited by 7

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 3; 2026: 7.

10 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026MME-Safety: A Fine-grained Benchmark for Safety Evaluation of MLLMs
  2. 2026MUSE: A Run-Centric Platform for Multimodal Unified Safety Evaluation of Large Language Models
  3. 2024Safety of Multimodal Large Language Models on Images and Texts
  4. 2025SDEval: Safety Dynamic Evaluation for Multimodal Large Language Models
  5. 2023All Languages Matter: On the Multilingual Safety of Large Language Models
  6. 2025SafeMT: Multi-turn Safety for Multimodal Language Models
  7. 2024SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Models
  8. 2025MCP-SafetyBench: A Benchmark for Safety Evaluation of Large Language Models with Real-World MCP Servers