How Diffusion Models Memorize
On the map: Diffusion models → Diffusion foundations and sampling
Abstract (arXiv)
Despite their success in image generation, diffusion models can memorize training data, raising serious privacy and copyright concerns. Although prior work has sought to characterize, detect, and mitigate memorization, the fundamental question of why and how it occurs remains unresolved. In this paper, we revisit the diffusion and denoising process and analyze latent space dynamics to address the question: "How do diffusion models memorize?" We show that memorization is driven by the overestimation of training samples during early denoising, which reduces diversity, collapses denoising trajectories, and accelerates convergence toward the memorized image. Specifically: (i) memorization cannot be explained by overfitting alone, as training loss is larger under memorization due to classifier-free guidance amplifying predictions and inducing overestimation; (ii) memorized prompts inject training images into noise predictions, forcing latent trajectories to converge and steering denoising toward their paired samples; and (iii) a decomposition of intermediate latents reveals how initial randomness is quickly suppressed and replaced by memorized content, with deviations from the theoretical denoising schedule correlating almost perfectly with memorization severity. Together, these results identify early overestimation as the central underlying mechanism of memorization in diffusion models.
Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Placed in Diffusion foundations and sampling, one of 14 directions in Diffusion models. Builds on 27 of its 31 references that are in the map. First posted on arXiv 30 Sep 2025.
Builds on
27 of 31 references.
Closest ancestors · 14
Same direction, newest first
- 2024Understanding and Mitigating Memorization in Generative Models via Sharpness of Probability Landscapes5 Dec
- 2024Classifier-Free Guidance inside the Attraction Basin May Cause Memorization23 Nov
- 2024Detecting, Explaining, and Mitigating Memorization in Diffusion Models31 Jul
- 2024Finding NeMo: Localizing Neurons Responsible For Memorization in Diffusion Models4 Jun
- 2024Unveiling and Mitigating Memorization in Text-to-image Diffusion Models through Cross Attention17 Mar
- 2024Scaling Rectified Flow Transformers for High-Resolution Image Synthesis5 Mar
- 2023Generalization in diffusion models arises from geometry-adaptive harmonic representations4 Oct
- 2023Understanding and Mitigating Copying in Diffusion Models31 May
- 2023On the De-duplication of LAION-2B17 Mar
- 2022Classifier-Free Diffusion Guidance26 Jul
- 2021High-Resolution Image Synthesis with Latent Diffusion Models20 Dec
- 2021Diffusion Models Beat GANs on Image Synthesis11 May
2 more
- 2020Denoising Diffusion Implicit Models6 Oct
- 2020Denoising Diffusion Probabilistic Models19 Jun
Other references · 13
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,058
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
- 2021GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Modelscited by 3,614
- 2023Extracting Training Data from Diffusion Modelscited by 732
- 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 424
- 2022A Self-Supervised Descriptor for Image Copy Detectioncited by 176
- 2022The Privacy Onion Effect: Memorization is Relativecited by 136
- 2023Ambient Diffusion: Learning Clean Distributions from Corrupted Datacited by 111
- 2023A Reproducible Extraction of Training Images from Diffusion Modelscited by 61
- 2021On Memorization in Probabilistic Deep Generative Modelscited by 60
1 more
Built on by
Citing papers per year: 2025: 2; 2026: 4.
6 papers.
- 2025Dominant vs. Dominated: Concept-Level Generative Collapse in Diffusion Modelscited by 1
- 2026Memorization Control in Diffusion Models from Denoising-centric Perspectivecited by 1
- 2026Steering Away from Memorization: Reachability-Constrained Reinforcement Learning for Text-to-Image Diffusioncited by 1
- 2025The Persistence of Cultural Memory: Investigating Multimodal Iconicity in Diffusion Modelscited by 0
- 2026Memorization In Stable Diffusion Is Unexpectedly Driven by CLIP Embeddingscited by 0
- 2026Support-Conditioned Flow Matching Is Kernel Smoothingcited by 0
- 2026Support-Conditioned Flow Matching Is Kernel Smoothing13 May 2026
- 2026Memorization In Stable Diffusion Is Unexpectedly Driven by CLIP Embeddings6 Apr 2026
- 2026Steering Away from Memorization: Reachability-Constrained Reinforcement Learning for Text-to-Image Diffusion24 Feb 2026
- 2026Memorization Control in Diffusion Models from Denoising-centric Perspective29 Jan 2026
- 2025Dominant vs. Dominated: Concept-Level Generative Collapse in Diffusion Models19 Dec 2025
- 2025The Persistence of Cultural Memory: Investigating Multimodal Iconicity in Diffusion Models14 Nov 2025
Similar, not cited
Close in wording, no citation either way
- 2023On Memorization in Diffusion Models
- 2025On the Edge of Memorization in Diffusion Models
- 2025Why Diffusion Models Don't Memorize: The Role of Implicit Dynamical Regularization in Training
- 2025Does Generation Require Memorization? Creative Diffusion Models using Ambient Diffusion
- 2026Local Coverage Governs Memorization in Diffusion Models
- 2026Understanding diffusion models requires rethinking (again) generalization
- 2026Early Signatures of Memorization in Diffusion Models via Basin Geometry and Cyclic Denoising
- 2026Two Calm Ends and the Wild Middle: A Geometric Picture of Memorization in Diffusion Models