OutSafe-Bench: A Benchmark for Multimodal Offensive Content Detection in Large Language Models
On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness
Abstract (arXiv)
Since Multimodal Large Language Models (MLLMs) are increasingly being integrated into everyday tools and intelligent agents, growing concerns have arisen regarding their possible output of unsafe contents, ranging from toxic language and biased imagery to privacy violations and harmful misinformation. Current safety benchmarks remain highly limited in both modality coverage and performance evaluations, often neglecting the extensive landscape of content safety. In this work, we introduce OutSafe-Bench, the first most comprehensive content safety evaluation test suite designed for the multimodal era. OutSafe-Bench includes a large-scale dataset that spans four modalities, featuring over 18,000 bilingual (Chinese and English) text prompts, 4,500 images, 450 audio clips and 450 videos, all systematically annotated across nine critical content risk categories. In addition to the dataset, we introduce a Multidimensional Cross Risk Score (MCRS), a novel metric designed to model and assess overlapping and correlated content risks across different categories. To ensure fair and robust evaluation, we propose FairScore, an explainable automated multi-reviewer weighted aggregation framework. FairScore selects top-performing models as adaptive juries, thereby mitigating biases from single-model judgments and enhancing overall evaluation reliability. Our evaluation of nine state-of-the-art MLLMs reveals persistent and substantial safety vulnerabilities, underscoring the pressing need for robust safeguards in MLLMs.
Key facts. Cited by 3 papers in the map (data through 14 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 44 of its 71 references that are in the map. First posted on arXiv 13 Nov 2025.
Builds on
44 of 71 references.
Closest ancestors · 3
Same direction, newest first
- 2024MLLMGuard: A Multi-dimensional Safety Evaluation Suite for Multimodal Large Language Models11 Jun
- 2024MultiTrust: A Comprehensive Benchmark Towards Trustworthy Multimodal Large Language Models11 Jun
- 2023MM-SafetyBench: A Benchmark for Safety Evaluation of Multimodal Large Language Models29 Nov
Other references · 41
- 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,170
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
- 2023Qwen Technical Reportcited by 3,344
- 2023MiniGPT-4: Enhancing Vision-Language Understanding with Advanced Large Language Modelscited by 2,711
- 2023G-Eval: NLG Evaluation using GPT-4 with Better Human Alignmentcited by 2,276
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,154
- 2019CNN-generated images are surprisingly easy to spot... for nowcited by 847
- 2023ChatEval: Towards Better LLM-based Evaluators through Multi-Agent Debatecited by 742
- 2021BBQ: A Hand-Built Bias Benchmark for Question Answeringcited by 701
- 2018Real-world Anomaly Detection in Surveillance Videoscited by 577
- 2020LayoutLMv2: Multi-modal Pre-training for Visually-Rich Document Understandingcited by 408
- 2023Trustworthy LLMs: a Survey and Guideline for Evaluating Large Language Models' Alignmentcited by 401
29 more
- 2019FUNSD: A Dataset for Form Understanding in Noisy Scanned Documentscited by 349
- 2024TrustLLM: Trustworthiness in Large Language Modelscited by 285
- 2019Image-based table recognition: data, model, and evaluationcited by 237
- 2023LVLM-eHub: A Comprehensive Evaluation Benchmark for Large Vision-Language Modelscited by 217
- 2023LAMM: Language-Assisted Multi-Modal Instruction-Tuning Dataset, Framework, and Benchmarkcited by 169
- 2024Who Validates the Validators? Aligning LLM-Assisted Evaluation of LLM Outputs with Human Preferencescited by 144
- 2023Holistic Analysis of Hallucination in GPT-4V(ision): Bias and Interference Challengescited by 131
- 2023PRD: Peer Rank and Discussion Improve Large Language Model based Evaluationscited by 114
- 2023How Many Unicorns Are in This Image? A Safety Evaluation Benchmark for Vision LLMscited by 108
- 2024TimeSuite: Improving MLLMs for Long Video Understanding via Grounded Tuningcited by 106
- 2023LLM-Eval: Unified Multi-Dimensional Automatic Evaluation for Open-Domain Conversations with Large Language Modelscited by 101
- 2023Safety Assessment of Chinese Large Language Modelscited by 85
- 2020ETHOS: an Online Hate Speech Detection Datasetcited by 66
- 2022SafeBench: A Benchmarking Platform for Safety Evaluation of Autonomous Vehiclescited by 66
- 2024Vitron: A Unified Pixel-level Vision LLM for Understanding, Generating, Segmenting, Editingcited by 49
- 2021SWSR: A Chinese Dataset and Lexicon for Online Sexism Detectioncited by 42
- 2023HateMM: A Multi-Modal Dataset for Hate Video Classificationcited by 42
- 2022FakeSV: A Multimodal Benchmark with Rich Social Context for Fake News Detection on Short Video Platformscited by 41
- 2020Hate Speech detection in the Bengali language: A dataset and its baseline evaluationcited by 37
- 2024MultiHateClip: A Multilingual Benchmark Dataset for Hateful Video Detection on YouTube and Bilibilicited by 25
- 2025Exo2Ego: Exocentric Knowledge Guided MLLM for Egocentric Video Understandingcited by 25
- 2025CASE-Bench: Context-Aware SafEty Benchmark for Large Language Modelscited by 20
- 2025Efficient Motion-Aware Video MLLMcited by 14
- 2024Multimodal LLM Enhanced Cross-lingual Cross-modal Retrievalcited by 13
- 2024MCFEND: A Multi-source Benchmark Dataset for Chinese Fake News Detectioncited by 12
- 2022A Large-scale Comprehensive Dataset and Copy-overlap Aware Evaluation Protocol for Segment-level Video Copy Detectioncited by 10
- 2024A Cross-Modal Approach to Silent Speech with LLM-Enhanced Recognitioncited by 9
- 2024PV-VTT: A Privacy-Centric Dataset for Mission-Specific Anomaly Detection and Natural Language Interpretationcited by 4
- 2025PRIV-QA: Privacy-Preserving Question Answering for Cloud Large Language Modelscited by 2
Built on by
Citing papers per year: 2026: 3.
3 papers.
Similar, not cited
Close in wording, no citation either way
- 2024Safety of Multimodal Large Language Models on Images and Texts
- 2025Can't See the Forest for the Trees: Benchmarking Multimodal Safety Awareness for Multimodal LLMs
- 2025SDEval: Safety Dynamic Evaluation for Multimodal Large Language Models
- 2024Both Text and Images Leaked! A Systematic Analysis of Data Contamination in Multimodal LLM
- 2026MTMCS-Bench: Evaluating Contextual Safety of Multimodal Large Language Models in Multi-Turn Dialogues
- 2025ChineseHarm-Bench: A Chinese Harmful Content Detection Benchmark
- 2026Benchmarking Open-Source Safety Guard Models: A Comprehensive Evaluation
- 2025From Evaluation to Defense: Advancing Safety in Video Large Language Models