List your company
ResearchFormerly WizWand

Image-to-Text Adversarial Attack on Evaluation set

97.4ASRFRA-Attack
-2.85623.17249.275.228May 20, 2026
Updated 5mo ago

Evaluation results

MethodLinks
FRA-AttackVictim Model=GLM-4.6V, Similarity Threshold=0.32026.0597.468.7
FRA-AttackVictim Model=Qwen3-VL-8B, Similarity Threshold=0.32026.0595.665.3
M-Attack-V2Victim Model=GLM-4.6V, Similarity Threshold=0.32026.0595.461.8
FRA-AttackVictim Model=Qwen3-VL-32B, Similarity Threshold=0.32026.0594.861.7
M-Attack-V2Victim Model=Qwen3-VL-8B, Similarity Threshold=0.32026.0593.162
FOA-AttackVictim Model=GLM-4.6V, Similarity Threshold=0.32026.0590.555.4
FRA-AttackVictim Model=Kimi-K2.5, Similarity Threshold=0.32026.0590.456.8
M-Attack-V2Victim Model=Qwen3-VL-32B, Similarity Threshold=0.32026.0589.456.7
FOA-AttackVictim Model=Qwen3-VL-8B, Similarity Threshold=0.32026.0589.254.7
M-AttackVictim Model=GLM-4.6V, Similarity Threshold=0.32026.0588.551.8
FOA-AttackVictim Model=Qwen3-VL-32B, Similarity Threshold=0.32026.0587.949.1
M-AttackVictim Model=Qwen3-VL-8B, Similarity Threshold=0.32026.0585.150.9
M-AttackVictim Model=Qwen3-VL-32B, Similarity Threshold=0.32026.0583.445.9
FRA-AttackVictim Model=Llama-3.2-11B-V, Similarity Threshold=0.32026.0582.248.1
M-Attack-V2Victim Model=Kimi-K2.5, Similarity Threshold=0.32026.058148.3
M-Attack-V2Victim Model=Gemma-3-27B-it, Similarity Threshold=0.32026.0580.639.6
M-Attack-V2Victim Model=Llama-3.2-11B-V, Similarity Threshold=0.32026.0580.344.9
FOA-AttackVictim Model=Kimi-K2.5, Similarity Threshold=0.32026.0577.440.8
FRA-AttackVictim Model=Gemma-3-27B-it, Similarity Threshold=0.32026.0577.336.9
FOA-AttackVictim Model=Gemma-3-27B-it, Similarity Threshold=0.32026.0573.533.9
M-AttackVictim Model=Gemma-3-27B-it, Similarity Threshold=0.32026.057231.8
FOA-AttackVictim Model=Llama-3.2-11B-V, Similarity Threshold=0.32026.0570.138
M-AttackVictim Model=Kimi-K2.5, Similarity Threshold=0.32026.0569.636.4
AdvDiffVLMVictim Model=Gemma-3-27B-it, Similarity Threshold=0.32026.056826.6
SSA-CWAVictim Model=Gemma-3-27B-it, Similarity Threshold=0.32026.056627.2
M-AttackVictim Model=Llama-3.2-11B-V, Similarity Threshold=0.32026.0565.635.4
AnyAttackVictim Model=Gemma-3-27B-it, Similarity Threshold=0.32026.055621.6
AttackVLMVictim Model=Gemma-3-27B-it, Similarity Threshold=0.32026.055425.8
AttackVLMVictim Model=Qwen3-VL-8B, Similarity Threshold=0.32026.05117.3
AttackVLMVictim Model=Qwen3-VL-32B, Similarity Threshold=0.32026.05105.8
AdvDiffVLMVictim Model=GLM-4.6V, Similarity Threshold=0.32026.0594.5
AdvDiffVLMVictim Model=Qwen3-VL-32B, Similarity Threshold=0.32026.0584.6
AttackVLMVictim Model=GLM-4.6V, Similarity Threshold=0.32026.0573.5
AdvDiffVLMVictim Model=Qwen3-VL-8B, Similarity Threshold=0.32026.0573.3
SSA-CWAVictim Model=Qwen3-VL-32B, Similarity Threshold=0.32026.0574.3
AdvDiffVLMVictim Model=Llama-3.2-11B-V, Similarity Threshold=0.32026.0563.4
AdvDiffVLMVictim Model=Kimi-K2.5, Similarity Threshold=0.32026.0563.8
AnyAttackVictim Model=Qwen3-VL-8B, Similarity Threshold=0.32026.0563.7
AnyAttackVictim Model=Qwen3-VL-32B, Similarity Threshold=0.32026.0565.2
AnyAttackVictim Model=GLM-4.6V, Similarity Threshold=0.32026.0564
AnyAttackVictim Model=Llama-3.2-11B-V, Similarity Threshold=0.32026.0562.8
AttackVLMVictim Model=Llama-3.2-11B-V, Similarity Threshold=0.32026.0552.5
AttackVLMVictim Model=Kimi-K2.5, Similarity Threshold=0.32026.0552.7
SSA-CWAVictim Model=Qwen3-VL-8B, Similarity Threshold=0.32026.0542.4
AnyAttackVictim Model=Kimi-K2.5, Similarity Threshold=0.32026.0542.6
SSA-CWAVictim Model=GLM-4.6V, Similarity Threshold=0.32026.0533.3
SSA-CWAVictim Model=Llama-3.2-11B-V, Similarity Threshold=0.32026.0532.5
SSA-CWAVictim Model=Kimi-K2.5, Similarity Threshold=0.32026.0511.7