Marco Pintore

TL;DR Visual adversarial examples make end-to-end OCR-free DocVQA models (Pix2Struct, Donut) return attacker-chosen answers, getting around their non-differentiable preprocessing.

TL;DR We evaluate whether vulnerability detectors can pinpoint the vulnerable lines; it turns out they are consistently biased by non-vulnerable ones.