Evaluating Robustness of Large Language Models Against Multilingual Typographical Errors
Not on the map. Why?
Abstract (arXiv)
Large language models (LLMs) are increasingly deployed in multilingual, real-world applications with user inputs -- naturally introducing typographical errors (typos). Yet most benchmarks assume clean input, leaving the robustness of LLMs to typos across languages largely underexplored. To address this gap, we introduce MulTypo, a multilingual typo generation algorithm that simulates human-like errors based on language-specific keyboard layouts and typing behavior. We evaluate 18 open-source LLMs across three model families and five downstream tasks spanning language inference, multi-choice question answering, mathematical reasoning, and machine translation tasks. Our results show that typos consistently degrade performance, particularly in generative tasks and those requiring reasoning -- while the natural language inference task is comparatively more robust. Instruction tuning improves clean-input performance but may increase brittleness under noise. We also observe language-dependent robustness: high-resource languages are generally more robust than low-resource ones, and translation from English is more robust than translation into English. Our findings underscore the need for noise-aware training and multilingual robustness evaluation. We release a Python package for MulTypo and make the source code publicly available at https://github.com/cisnlp/multypo.
Key facts. Cited by 9 papers in the map (data through 7 Oct 2026). Builds on 33 of its 55 references that are in the map. First posted on arXiv 10 Oct 2025.
Builds on
33 of 55 references.
References · 33
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2021Training Verifiers to Solve Math Word Problemscited by 9,743
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2019Unsupervised Cross-lingual Representation Learning at Scalecited by 3,907
- 2020Beyond Accuracy: Behavioral Testing of NLP models with CheckListcited by 979
- 2018XNLI: Evaluating Cross-lingual Sentence Representationscited by 913
- 2023Large Language Models Can Be Easily Distracted by Irrelevant Contextcited by 820
- 2019Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailmentcited by 663
- 2018TextBugger: Generating Adversarial Text Against Real-world Applicationscited by 376
- 2018Black-box Generation of Adversarial Text Sequences to Evade Deep Learning Classifierscited by 341
- 2020BAE: BERT-based Adversarial Examples for Text Classificationcited by 316
21 more
- 2023The Belebele Benchmark: a Parallel Reading Comprehension Dataset in 122 Language Variantscited by 300
- 2023PromptRobust: Towards Evaluating the Robustness of Large Language Models on Adversarial Promptscited by 218
- 2023On the Robustness of ChatGPT: An Adversarial and Out-of-distribution Perspectivecited by 208
- 2019Combating Adversarial Misspellings with Robust Word Recognitioncited by 162
- 2021Evaluating the Robustness of Neural Language Models to Input Perturbationscited by 87
- 2024A Complete Survey on LLM-based AI Chatbotscited by 71
- 2020Adv-BERT: BERT is not robust on misspellings! Generating nature adversarial samples on BERTcited by 69
- 2021True Few-Shot Learning with Prompts -- A Real-World Perspectivecited by 38
- 2023Are Large Language Models Really Robust to Word-Level Perturbations?cited by 32
- 2023LogiCoT: Logical Chain-of-Thought Instruction-Tuningcited by 31
- 2023MathAttack: Attacking Large Language Models Towards Math Solving Abilitycited by 31
- 2024Reasoning Robustness of LLMs to Adversarial Typographical Errorscited by 31
- 2024Resilience of Large Language Models for Noisy Instructionscited by 20
- 2021Interpreting the Robustness of Neural NLP Models to Textual Perturbationscited by 17
- 2025When Models Reason in Your Language: Controlling Thinking Language Comes at the Cost of Accuracycited by 13
- 2021Label-Descriptive Patterns and Their Application to Characterizing Classification Errorscited by 10
- 2022Robustification of Multilingual Language Models to Real-world Noise in Crosslingual Zero-shot Settings with Robust Contrastive Pretrainingcited by 9
- 2024SYNTHEVAL: Hybrid Behavioral Testing of NLP Models with Synthetic CheckListscited by 6
- 2025Exploring Robustness of Multilingual LLMs on Real-World Noisy Datacited by 6
- 2025Simulating Errors in Touchscreen Typingcited by 4
- 2025How Important is `Perfect' English for Machine Translation Prompts?cited by 2
Built on by
Citing papers per year: 2026: 9.
9 papers.
- 2026The Sim-to-Real Gap of Foundation Model Agents: A Unified MDP Perspectivecited by 1
- 2026Latent Undertow: How Ordinary Typos Break Probescited by 1
- 2026Semantic Content Determines Algorithmic Performancecited by 0
- 2026Individual and Combined Effects of English as a Second Language and Typos on LLM Performancecited by 0
- 2026ReverseMath: Answer Inversion for Scalable and Verifiable Mathematical Problem Generationcited by 0
- 2026ReasonBreak: Probing Vulnerabilities in Reasoning-Enabled Vision-Language-Action Models for Autonomous Drivingcited by 0
- 2026Beyond Prompt Engineering: A Systematic Analysis of Prompt Lexical Sensitivity and Its Impacts on Qualitycited by 0
- 2026Quantifying and Mitigating Korean Jamo-Level Typographical Vulnerabilities in Large Language Modelscited by 0
- 2026When Noise Fabricates Bias: The Fragility of LLM-as-a-Judge Bias Measurement under Noisy Textcited by 0
- 2026When Noise Fabricates Bias: The Fragility of LLM-as-a-Judge Bias Measurement under Noisy Text10 Sep 2026
- 2026Quantifying and Mitigating Korean Jamo-Level Typographical Vulnerabilities in Large Language Models31 Aug 2026
- 2026Latent Undertow: How Ordinary Typos Break Probes8 Jul 2026
- 2026Beyond Prompt Engineering: A Systematic Analysis of Prompt Lexical Sensitivity and Its Impacts on Quality16 Jun 2026
- 2026The Sim-to-Real Gap of Foundation Model Agents: A Unified MDP Perspective5 Jun 2026
- 2026ReasonBreak: Probing Vulnerabilities in Reasoning-Enabled Vision-Language-Action Models for Autonomous Driving27 May 2026
- 2026ReverseMath: Answer Inversion for Scalable and Verifiable Mathematical Problem Generation26 May 2026
- 2026Individual and Combined Effects of English as a Second Language and Typos on LLM Performance6 Apr 2026
- 2026Semantic Content Determines Algorithmic Performance29 Jan 2026
Similar, not cited
Close in wording, no citation either way
- 2025FLUKE: A Linguistically-Driven and Task-Agnostic Framework for Robustness Evaluation
- 2023Evaluating Concurrent Robustness of Language Models Across Diverse Challenge Sets
- 2026Why do Large Language Models Fail in Low-resource Translation? Unraveling the Token Dynamics of Large Language Models for Machine Translation
- 2025Evaluating Multilingual and Code-Switched Alignment in LLMs via Synthetic Natural Language Inference
- 2025Towards Alignment-Centric Paradigm: A Survey of Instruction Tuning in Large Language Models
- 2026LPDS: Evaluating LLM Robustness Through Logic-Preserving Difficulty Scaling
- 2026Can Large Language Models Understand, Reason About, and Generate Code-Switched Text?
- 2024OMGEval: An Open Multilingual Generative Evaluation Benchmark for Large Language Models