Resolution Thresholds in VLM Detection of Harmful ASCII Art Across Construction Modes and Languages
On the map: Multimodal LLMs / vision-language models → VLM benchmarks and visual reasoning
also in 1 more
Abstract (arXiv)
Large Vision-Language Models (VLMs) are increasingly deployed as content moderation tools, yet they remain vulnerable to jailbreak attacks in which harmful text is visually encoded as ASCII art. This can allow inappropriate or harmful content to bypass moderation systems. To address this vulnerability, this paper investigates how image resolution affects VLM detection of harmful ASCII art across eight character construction modes (L1-L8), ranging from dense block characters to word-embedded designs. We evaluate eight state-of-the-art VLMs on English and Chinese corpora using a pipeline that generates ASCII art images at ten resolution scales, probing whether a consistent detection-failure threshold exists across models, modes, and languages. Results indicate that detection rates decline sharply above certain resolution thresholds, and that word-based modes are the most resistant to detection across the full resolution range. These findings reveal a systematic vulnerability in VLM-based content moderation systems and motivate resolution-aware evaluation standards.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in VLM benchmarks and visual reasoning, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 5 of its 11 references that are in the map. First posted on arXiv 28 Jun 2026.
Builds on
5 of 11 references.
Closest ancestors · 1
Same direction, newest first
Other references · 4
- 2023Detecting Language Model Attacks with Perplexitycited by 411
- 2024ArtPrompt: ASCII Art-based Jailbreak Attacks against Aligned LLMscited by 197
- 2023The Generative AI Paradox: "What It Can Create, It May Not Understand"cited by 97
- 2023Testing the Depth of ChatGPT's Comprehension via Cross-Modal Tasks Based on ASCII-Art: GPT3.5's Abilities in Regard to Recognizing and Generating ASCII-Art Are Not Totally Lackingcited by 7
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2024Unveiling Typographic Deceptions: Insights of the Typographic Vulnerability in Large Vision-Language Model
- 2025Text Speaks Louder than Vision: ASCII Art Reveals Textual Biases in Vision-Language Models
- 2026One Perturbation, Two Failure Modes: Probing VLM Safety via Embedding-Guided Typographic Perturbations
- 2026Typographic Attack Against VLM-based AI-generated Image Detection
- 2026Can't Find Waldo: Evaluating VLMs' Sensitivity to Image Resolution and Detail Level
- 2026How Robust is OCR-Reasoning? Evaluating OCR-Reasoning Robustness of Vision-Language Models under Visual Perturbations
- 2026Do VLMs Read or Rewrite? On Transcription Faithfulness in Vision-Language Models
- 2025Analysing the Robustness of Vision-Language-Models to Common Corruptions