Adversarial Attack on MVBench
83.84ASRLAMP
Evaluation results
| Method | Links | |
|---|---|---|
| LAMPTarget Model=Qwen-VL-Chat, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 83.84 | |
| LAMPTarget Model=LLaVa-v1.6, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 82.78 | |
| LAMPTarget Model=Qwen-2.5, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 82.43 | |
| LAMPTarget Model=Mantis-SIGLIP, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 78.57 | |
| LAMPTarget Model=VILA-1.5, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 77.81 | |
| LAMPTarget Model=Mantis-CLIP, Evaluation Protocol=Standard2026.01 | 77.67 | |
| LAMPTarget Model=Mantis-Idefics2, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 76.78 | |
| UAP-VLPTarget Model=Qwen-VL-Chat, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 65.55 | |
| UAP-VLPTarget Model=Qwen-2.5, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 64.59 | |
| UAP-VLPTarget Model=LLaVa-v1.6, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 64.44 | |
| Doubly-UAPTarget Model=Mantis-SIGLIP, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 63.63 | |
| CPGC-UAPTarget Model=LLaVa-v1.6, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 63.35 | |
| Doubly-UAPTarget Model=Mantis-CLIP, Evaluation Protocol=Standard2026.01 | 61.63 | |
| Doubly-UAPTarget Model=Mantis-Idefics2, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 61.63 | |
| CPGC-UAPTarget Model=Qwen-VL-Chat, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 61.09 | |
| CPGC-UAPTarget Model=Qwen-2.5, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 60.94 | |
| Pandora's boxTarget Model=Mantis-CLIP, Evaluation Protocol=Standard2026.01 | 60.61 | |
| Doubly-UAPTarget Model=VILA-1.5, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 60.33 | |
| UAP-VLPTarget Model=Mantis-Idefics2, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 60.24 | |
| UAP-VLPTarget Model=Mantis-SIGLIP, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 59.68 | |
| UAP-VLPTarget Model=Mantis-CLIP, Evaluation Protocol=Standard2026.01 | 59.66 | |
| Jailbreak-MLLMTarget Model=Mantis-CLIP, Evaluation Protocol=Standard2026.01 | 59.66 | |
| UAP-VLPTarget Model=VILA-1.5, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 57.79 | |
| Jailbreak-MLLMTarget Model=Mantis-SIGLIP, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 57.67 | |
| X-transferTarget Model=Mantis-CLIP, Evaluation Protocol=Standard2026.01 | 57.11 | |
| CPGC-UAPTarget Model=VILA-1.5, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 56.24 | |
| CPGC-UAPTarget Model=Mantis-SIGLIP, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 55.68 | |
| Doubly-UAPTarget Model=LLaVa-v1.6, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 55.31 | |
| CPGC-UAPTarget Model=Mantis-CLIP, Evaluation Protocol=Standard2026.01 | 54.35 | |
| CPGC-UAPTarget Model=Mantis-Idefics2, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 54.32 | |
| Doubly-UAPTarget Model=Qwen-VL-Chat, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 53.31 | |
| Doubly-UAPTarget Model=Qwen-2.5, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 50.31 | |
| Jailbreak-MLLMTarget Model=Mantis-Idefics2, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 42.71 | |
| Jailbreak-MLLMTarget Model=VILA-1.5, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 40.13 | |
| Jailbreak-MLLMTarget Model=LLaVa-v1.6, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 40.13 | |
| Jailbreak-MLLMTarget Model=Qwen-VL-Chat, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 38.32 | |
| Jailbreak-MLLMTarget Model=Qwen-2.5, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 36.23 |