mlsanityData to 7 Oct 2026

How a Bit Becomes a Story: Semantic Steering via Differentiable Fault Injection

arXiv 2512.14715 ↗First posted 9 Dec 2025cs.LG cs.AIcited by 0

Not on the map. Why?

Abstract (arXiv)

Hard-to-detect hardware bit flips, from either malicious circuitry or bugs, have already been shown to make transformers vulnerable in non-generative tasks. This work, for the first time, investigates how low-level, bitwise perturbations (fault injection) to the weights of a large language model (LLM) used for image captioning can influence the semantic meaning of its generated descriptions while preserving grammatical structure. While prior fault analysis methods have shown that flipping a few bits can crash classifiers or degrade accuracy, these approaches overlook the semantic and linguistic dimensions of generative systems. In image captioning models, a single flipped bit might subtly alter how visual features map to words, shifting the entire narrative an AI tells about the world. We hypothesize that such semantic drifts are not random but differentiably estimable. That is, the model's own gradients can predict which bits, if perturbed, will most strongly influence meaning while leaving syntax and fluency intact. We design a differentiable fault analysis framework, BLADE (Bit-level Fault Analysis via Differentiable Estimation), that uses gradient-based sensitivity estimation to locate semantically critical bits and then refines their selection through a caption-level semantic-fluency objective. Our goal is not merely to corrupt captions, but to understand how meaning itself is encoded, distributed, and alterable at the bit level, revealing that even imperceptible low-level changes can steer the high-level semantics of generative vision-language models. It also opens pathways for robustness testing, adversarial defense, and explainable AI, by exposing how structured bit-level faults can reshape a model's semantic output.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 16 of its 49 references that are in the map. First posted on arXiv 9 Dec 2025.

Builds on

16 of 49 references.

References · 16

  1. 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,049
  2. 2023BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Modelscited by 6,069
  3. 2022BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generationcited by 4,310
  4. 2019DistilBERT, a distilled version of BERT: smaller, faster, cheaper and lightercited by 4,243
  5. 2019TBT: Targeted Neural Network Attack with Bit Trojancited by 112
  6. 2019Bit-Flip Attack: Crushing Neural Network with Progressive Bit Searchcited by 106
  7. 2020DeepHammer: Depleting the Intelligence of Deep Neural Networks through Targeted Chain of Bit Flipscited by 53
  8. 2021DeepSteal: Advanced Model Extractions Leveraging Efficient Weight Stealing in Memoriescited by 42
  9. 2023One-bit Flip is All You Need: When Bit-flip Attack Meets Model Trainingcited by 14
  10. 2017Another Flip in the Wall of Rowhammer Defensescited by 11
  11. 2020Deep-Dup: An Adversarial Weight Duplication Attack Framework to Crush Deep Neural Network in Multi-Tenant FPGAcited by 10
  12. 2024GenBFA: An Evolutionary Optimization Approach to Bit-Flip Attacks on LLMscited by 10
4 more
  1. 2025SBFA: Single Sneaky Bit Flip Attack to Break Large Language Modelscited by 5
  2. 2025Maximal Brain Damage Without Data or Optimization: Disrupting Neural Networks via Sign-Bit Flipscited by 4
  3. 2023Compiled Models, Built-In Exploits: Uncovering Pervasive Bit-Flip Attack Surfaces in DNN Executablescited by 2
  4. 2025SALTY: Explainable Artificial Intelligence Guided Structural Analysis for Hardware Trojan Detectioncited by 1

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2022Do Vision-and-Language Transformers Learn Grounded Predicate-Noun Dependencies?
  2. 2025Curing Semantic Drift: A Dynamic Approach to Grounding Generation in Large Vision-Language Models
  3. 2026Corrupted but Correct: Why Vision-Language Models Lie to Themselves Internally
  4. 2025Image Generation from Contextually-Contradictory Prompts
  5. 2026Semantic Misalignment in Vision-Language Models under Perceptual Degradation
  6. 2023Simple Token-Level Confidence Improves Caption Correctness
  7. 2025Using LLMs as prompt modifier to avoid biases in AI image generators
  8. 2026When Understanding Becomes a Risk: Authenticity and Safety Risks in the Emerging Image Generation Paradigm