atlas

Research map / Vision-language and multimodal / Human and embodied modeling

Textural or Textual: How Vision-Language Models Read Text in Images

ICML 2025 · Vision-language and multimodal › Human and embodied modeling · approach: Vision-language pretraining

Read the paperCheck your idea against 108,967 papers

AI-extracted summary. Written by AI from the paper's full text. Numbers and claims can be wrong or missing context, so check the paper before you cite or build on it.

Introduces the ToT dataset of text-overlaid ImageNet images and paronym/synonym word pairs, uses layer-wise intrinsic dimension and linear probes to show CLIP reads text largely via texture until a late semantic stage, and fine-tunes only the last block to defend against typographic attacks.

Problem

Whether vision-language models genuinely encode the semantics of text in images or mainly treat it as texture, and at which depth textual semantics affect representations and typographic attack vulnerability.

Approach

Disentangles orthographic form from meaning using paronym/synonym word pairs and controlled text overlays, tracks intrinsic dimension across ViT layers alongside linear probe accuracy, and finds semantic differentiation only emerges in the final block, motivating last-block fine-tuning as a defense.

Key results

Measured effects reported in the paper

What was changedWhereMeasuredEffect
Fine-tune only the last block on hard-level dataCLIP ViT-B/16 · Hard Nonsaccuracy (%): 77.2 -> 81.7Helped
Fine-tune only the last block on hard-level dataCLIP ViT-B/16 · Hard Irraccuracy (%): 59.9 -> 69.5Helped
Fine-tune only the last block on hard-level dataCLIP ViT-B/16 · Easy Origaccuracy (%): 82.3 -> 84.7Helped
Fine-tune the swell blocks rather than the last block (ablation)CLIP ViT-B/16 · Hard Nonsaccuracy (%): 81.7 -> 56.2Hurt
Fine-tune the shrink blocks rather than the last block (ablation)CLIP ViT-B/16 · Hard Nonsaccuracy (%): 81.7 -> 81.1No clear effect
Fine-tune shrink blocks excluding the last block (ablation)CLIP ViT-B/16 · Hard Nonsaccuracy (%): 81.7 -> 81.7No clear effect
Fine-tune all blocks rather than only the last block (ablation)CLIP ViT-B/16 · Hard Nonsaccuracy (%): 81.7 -> 48.2Hurt
Fine-tune only the last block on hard-level rather than medium-level data (ablation)CLIP ViT-B/16 · Hard Irraccuracy (%): 22.0 -> 69.5Helped
Fine-tune only the last block on medium-level dataCLIP ViT-B/16 · Medium Irraccuracy (%): 66.0 -> 82.4Helped
Use vision-only ViT rather than CLIPToT image classification · ToT Irr 80accuracy (%): 42.9 -> 87.1Helped
Increase irrelevant-text font size from 20 to 120CLIP · ToT Irraccuracy (%): 78.8 -> 38.9Hurt
Add semantically consistent text overlayCLIP · ToT classificationaccuracy (%): 86.6 -> 98.4Helped

Surprising findings

Limitations

Experimental setup

Datasets: ToT ImageNet-1k Disentangle PAINT Prefix

Benchmarks: ToT Disentangle PAINT Prefix

Metrics: accuracy intrinsic dimension

Baselines: CLIP Prefix Disentangle PAINT MetaCLIP ViT-B/16 DINOv2

Builds on: CLIP TwoNN intrinsic dimension estimator linear probe

Closest papers by meaning

Writing a paper in this area? scime draft is a free LaTeX editor with AI included, real-time co-authors and a check of your references and venue rules before you submit. It also imports OpenAI Prism projects.

Open scime draft

Get the next scime Dispatch and a monthly field update

Free. We send a confirmation link first; every email has a one-click unsubscribe. Privacy