USB: A Comprehensive and Unified Safety Evaluation Benchmark for Multimodal Large Language Models
On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness
also in 1 more
Abstract (arXiv)
Despite their remarkable achievements and widespread adoption, Multimodal Large Language Models (MLLMs) have revealed significant security vulnerabilities, highlighting the urgent need for robust safety evaluation benchmarks. Existing MLLM safety benchmarks, however, fall short in terms of data quality and coverge, and modal risk combinations, resulting in inflated and contradictory evaluation results, which hinders the discovery and governance of security concerns. Besides, we argue that vulnerabilities to harmful queries and oversensitivity to harmless ones should be considered simultaneously in MLLMs safety evaluation, whereas these were previously considered separately. In this paper, to address these shortcomings, we introduce Unified Safety Benchmarks (USB), which is one of the most comprehensive evaluation benchmarks in MLLM safety. Our benchmark features high-quality queries, extensive risk categories, comprehensive modal combinations, and encompasses both vulnerability and oversensitivity evaluations. From the perspective of two key dimensions: risk categories and modality combinations, we demonstrate that the available benchmarks -- even the union of the vast majority of them -- are far from being truly comprehensive. To bridge this gap, we design a sophisticated data synthesis pipeline that generates extensive, high-quality complementary data addressing previously unexplored aspects. By combining open-source datasets with our synthetic data, our benchmark provides 4 distinct modality combinations for each of the 61 risk sub-categories, covering both English and Chinese across both vulnerability and oversensitivity dimensions.
Key facts. Cited by 10 papers in the map (data through 14 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 48 of its 59 references that are in the map. First posted on arXiv 26 May 2025.
Builds on
48 of 59 references.
Closest ancestors · 17
Same direction, newest first
- 2025HiddenDetect: Detecting Jailbreak Attacks against Large Vision-Language Models via Monitoring Hidden States20 Feb
- 2025Can't See the Forest for the Trees: Benchmarking Multimodal Safety Awareness for Multimodal LLMs16 Feb
- 2025A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations14 Feb
- 2025Jailbreaking Multimodal Large Language Models via Shuffle Inconsistency9 Jan
- 2024RapGuard: Safeguarding Multimodal Large Language Models via Rationale-aware Defensive Prompting25 Dec
- 2024VLSBench: Unveiling Visual Leakage in Multimodal Safety29 Nov
- 2024Llama Guard 3 Vision: Safeguarding Human-AI Image Understanding Conversations15 Nov
- 2024Multimodal Situational Safety8 Oct
- 2024MOSSBench: Is Your Multimodal Language Model Oversensitive to Safe Queries?22 Jun
- 2024SPA-VL: A Comprehensive Safety Preference Alignment Dataset for Vision Language Model17 Jun
- 2024MLLMGuard: A Multi-dimensional Safety Evaluation Suite for Multimodal Large Language Models11 Jun
- 2024Cross-Modal Safety Alignment: Is textual unlearning all you need?27 May
5 more
- 2024JailBreakV: A Benchmark for Assessing the Robustness of MultiModal Large Language Models against Jailbreak Attacks3 Apr
- 2024Images are Achilles' Heel of Alignment: Exploiting Visual Vulnerabilities for Jailbreaking Multimodal Large Language Models14 Mar
- 2024Red Teaming Visual Language Models23 Jan
- 2023MM-SafetyBench: A Benchmark for Safety Evaluation of Multimodal Large Language Models29 Nov
- 2023FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts9 Nov
Other references · 31
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2023GPT-4 Technical Reportcited by 18,396
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2023Visual Instruction Tuningcited by 7,869
- 2025Qwen2.5-VL Technical Reportcited by 5,587
- 2024GPT-4o System Cardcited by 4,588
- 2023Improved Baselines with Visual Instruction Tuningcited by 4,418
- 2024Qwen2-VL: Enhancing Vision-Language Model's Perception of the World at Any Resolutioncited by 4,234
- 2024Scaling Rectified Flow Transformers for High-Resolution Image Synthesiscited by 4,181
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
- 2024Gemini 1.5: Unlocking multimodal understanding across millions of tokens of contextcited by 3,224
- 2023A Survey of Large Language Modelscited by 2,576
19 more
- 2023InternVL: Scaling up Vision Foundation Models and Aligning for Generic Visual-Linguistic Taskscited by 2,565
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
- 2024ChatGLM: A Family of Large Language Models from GLM-130B to GLM-4 All Toolscited by 1,121
- 2024MiniCPM-V: A GPT-4V Level MLLM on Your Phonecited by 1,079
- 2024How Far Are We to GPT-4V? Closing the Gap to Commercial Multimodal Models with Open-Source Suitescited by 1,050
- 2023CogVLM: Visual Expert for Pretrained Language Modelscited by 708
- 2023VILA: On Pre-training for Visual Language Modelscited by 692
- 2024R-Judge: Benchmarking Safety Risk Awareness for LLM Agentscited by 288
- 2024NVILA: Efficient Frontier Visual Language Modelscited by 209
- 2023SafetyBench: Evaluating the Safety of Large Language Modelscited by 199
- 2024Safety Fine-Tuning at (Almost) No Cost: A Baseline for Vision Large Language Modelscited by 167
- 2023DRESS: Instructing Large Vision-Language Models to Align and Interact with Humans via Natural Language Feedbackcited by 103
- 2025A Survey of Graph Retrieval-Augmented Generation for Customized Large Language Modelscited by 88
- 2024A Survey on Benchmarks of Multimodal Large Language Modelscited by 82
- 2024SafeBench: A Safety Evaluation Framework for Multimodal Large Language Modelscited by 69
- 2024Jailbreak Large Vision-Language Models Through Multi-Modal Linkagecited by 62
- 2024Entity Alignment with Noisy Annotations from Large Language Modelscited by 22
- 2025Equilibrate RLHF: Towards Balancing Helpfulness-Safety Trade-off in Large Language Modelscited by 22
- 2024Chinese SafetyQA: A Safety Short-form Factuality Benchmark for Large Language Modelscited by 7
Built on by
Citing papers per year: 2025: 3; 2026: 7.
10 papers.
- 2025LinearRAG: Linear Graph Retrieval Augmented Generation on Large-scale Corporacited by 49
- 2026SkillTrojan: Backdoor Attacks on Skill-Based Agent Systemscited by 25
- 2025SaFeR-VLM: Toward Safety-aware Fine-grained Reasoning in Multimodal Modelscited by 10
- 2026Evolving Contextual Safety in Multi-Modal Large Language Models via Inference-Time Self-Reflective Memorycited by 5
- 2025Aetheria: A multimodal interpretable content safety framework based on multi-agent debate and collaborationcited by 2
- 2026Automated Safety Benchmarking: A Multi-agent Pipeline for LVLMscited by 1
- 2026From Sparse Decisions to Dense Reasoning: A Multi-attribute Trajectory Paradigm for Multimodal Moderationcited by 0
- 2026OOD-MMSafe: Advancing MLLM Safety from Harmful Intent to Hidden Consequencescited by 0
- 2026ProjLens: Unveiling the Role of Projectors in Multimodal Model Safetycited by 0
- 2026ThinkingGuard: Decoding Implicit Hazards via Step-by-Step Risk Attribution in Multimodal Large Language Modelscited by 0
- 2026ThinkingGuard: Decoding Implicit Hazards via Step-by-Step Risk Attribution in Multimodal Large Language Models29 Sep 2026
- 2026ProjLens: Unveiling the Role of Projectors in Multimodal Model Safety21 Apr 2026
- 2026SkillTrojan: Backdoor Attacks on Skill-Based Agent Systems8 Apr 2026
- 2026Evolving Contextual Safety in Multi-Modal Large Language Models via Inference-Time Self-Reflective Memory16 Mar 2026
- 2026OOD-MMSafe: Advancing MLLM Safety from Harmful Intent to Hidden Consequences10 Mar 2026
- 2026From Sparse Decisions to Dense Reasoning: A Multi-attribute Trajectory Paradigm for Multimodal Moderation28 Jan 2026
- 2026Automated Safety Benchmarking: A Multi-agent Pipeline for LVLMs27 Jan 2026
- 2025Aetheria: A multimodal interpretable content safety framework based on multi-agent debate and collaboration2 Dec 2025
- 2025LinearRAG: Linear Graph Retrieval Augmented Generation on Large-scale Corpora11 Oct 2025
- 2025SaFeR-VLM: Toward Safety-aware Fine-grained Reasoning in Multimodal Models8 Oct 2025
Similar, not cited
Close in wording, no citation either way
- 2026MME-Safety: A Fine-grained Benchmark for Safety Evaluation of MLLMs
- 2026MUSE: A Run-Centric Platform for Multimodal Unified Safety Evaluation of Large Language Models
- 2024Safety of Multimodal Large Language Models on Images and Texts
- 2025SDEval: Safety Dynamic Evaluation for Multimodal Large Language Models
- 2023All Languages Matter: On the Multilingual Safety of Large Language Models
- 2025SafeMT: Multi-turn Safety for Multimodal Language Models
- 2024SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Models
- 2025MCP-SafetyBench: A Benchmark for Safety Evaluation of Large Language Models with Real-World MCP Servers