Multimodal memory poisoning attack