NeurIPS 2026 · arXiv:2505.19616

Diagnosing and Mitigating Modality Interference in Multimodal Large Language Models

When one modality should be ignored, current MLLMs still listen — and their predictions change.

1 University of California, Davis UC Davis
Figure 1 — Modality interference across 15 MLLMs
Figure 1. Modality interference across 15 MLLMs. Left: vision tasks collapse under misleading text. Right: text-heavy reasoning degrades under visual noise. Polygon area = model capability.
Overview

Abstract

Multimodal Large Language Models achieve strong benchmark performance, but remain fragile when irrelevant modalities contain spurious or misleading signals. We identify this failure as Modality Interference, where task-irrelevant image or text content improperly changes model predictions. We propose a causal perturbation-based evaluation protocol to measure this behavior across image-heavy, text-heavy, and VQA tasks. To mitigate it, we introduce a perturbation-aware fine-tuning framework combining heuristic and adversarial perturbations with consistency regularization between clean and perturbed inputs. Across diverse MLLM families and scales, our method improves both unimodal robustness and standard multimodal performance.

Motivation

What is Modality Interference?

A model exhibits modality interference when its answer changes because of a modality that should be irrelevant to the task. We make this concrete with two failure cases.

A · Vision Task

Image + misleading text → prediction collapse

The image determines the answer, but a misleading caption such as "this seems to depict a dog" overrides the visual evidence. Strong MLLMs follow the text and produce the wrong label.

Image-heavy interference example
B · Text Task

QA + irrelevant image → reasoning degradation

A pure text QA question should be answered from text alone, yet attaching an unrelated real image (or even a black/white canvas) shifts the model's distribution and degrades accuracy on standard benchmarks.

Text-heavy interference example
Key Findings

Four observations across MLLM families

!

Pervasive Failure

Modality interference appears across LLaVA, Qwen-VL, InternVL, and InstructBLIP families.

↑

Scale Helps, But Doesn't Solve

Larger models are more robust, but interference remains observable even at large scales.

⚠

Misleading Text Hurts Vision

Image-heavy classification can collapse when text contains incorrect but plausible descriptions.

✓

Training Restores Robustness

Our method improves clean and perturbed performance while preserving VQA accuracy.

Causal Diagnosis

Measuring Interference as a Causal Effect

Treat irrelevant modality perturbations as interventions. If the task-relevant modality stays unchanged, but the prediction changes after perturbing the irrelevant modality, the model exhibits interference.

Figure 2 — Causal graph illustrating modality interference
Figure 2. Causal graph illustrating modality interference. Heuristic interventions perturb either the image or text input, affecting their intermediate representations and ultimately the model prediction.
Causal effect of intervention
CE = δ(P, P′)
where P is the clean prediction distribution and P′ is the prediction distribution after intervening on the irrelevant modality.
Decision-level metric
δcp = 𝟙[ a ≠ a′ ]
a fraction of inputs whose decision changes under perturbation — a direct measurement of interference.
Perturbation Protocol

What we intervene on, and how

Each task category fixes the relevant modality and perturbs the irrelevant one. Balanced VQA tasks check that mitigation does not destroy normal multimodal capability.

Image-heavy
RelevantImage
IrrelevantText
  • Unrelated scientific facts
  • Misleading descriptions linked to incorrect options
  • OCR-style noise OOD
Text-heavy
RelevantText
IrrelevantImage
  • Random pixels
  • Full-black canvas
  • Full-white canvas
  • Irrelevant real images
  • Unrelated UI screenshots OOD
Balanced VQA
RelevantImage + Text
Irrelevant—
  • No perturbation
  • Used to verify mitigation preserves multimodal reasoning
Method

Perturbation-aware Fine-tuning

Three components, jointly trained: heuristic input augmentation, modality-masked adversarial embedding perturbation, and output-level consistency regularization.

1

Heuristic Perturbation Augmentation

Build clean and perturbed versions of image-heavy and text-heavy samples DAUG = Dimg ∪ Dimgpert ∪ Dtext ∪ Dtextpert ∪ DVQA.

→
2

Modality-masked Adversarial Perturbation

PGD-style raw-gradient updates in embedding space, masked so only task-irrelevant modality tokens are perturbed.

→
3

Consistency Regularization

Force agreement between clean and perturbed output distributions via KL or JS divergence (we find JS slightly stronger).

Figure 3 — Overview of the proposed framework
Figure 3. Overview of our proposed framework. Heuristic perturbations enter at the input level; modality-masked adversarial noise is injected after the multimodal projector; consistency regularization aligns clean and perturbed predictions.
Final objective
Ltotal = Lsft + Ladv + λcons Lconsistency
Supervised loss preserves task signal. Adversarial loss probes worst-case sensitive directions in the irrelevant modality. Consistency anchors the prediction so it does not move when only the irrelevant modality is perturbed.
Experiments

Robustness Gains Across Model Families

Vanilla MLLMs degrade under perturbations; ours holds steady. We summarize the headline numbers below; full tables are in the paper.

Radar chart of clean vs perturbed performance after fine-tuning
Clean vs perturbed performance across families after our perturbation-aware fine-tuning. Ours expands the safe region across both vision-heavy and text-heavy interference axes.
Per-perturbation comparison
Per-perturbation breakdown — the largest gains appear exactly where vanilla models collapse.
LLaVA-1.5-7B
family · LLaVA
Mini-ImageNet (perturbed)43.5 → 98.4+
Caltech-101 (perturbed)57.4 → 98.9+
OpenBookQA (perturbed)56.4 → 81.0+
VQA overall63.8 → 66.8
InstructBLIP-7B
family · BLIP
Caltech-101 (misleading text)17.5 → 99.0
OpenBookQA (perturbed)46.2 → 78.3
VQA overall56.4 → 64.8
Qwen2.5-VL-7B
family · Qwen-VL
OpenBookQA (perturbed)77.5 → 92.7
MMLU (perturbed)63.7 → 71.5
VQA overall— → stable
Numbers are summary highlights from the paper. Refer to the manuscript for full tables, std-devs, and 13B variants.
Ablation

Each component contributes

Vanilla → +DVQA → +DAUG → +KL/JS → +ADV → Ours. Augmentation gives the largest jump; consistency and adversarial perturbation add stability.

Two-panel ablation curve
+ DVQA

VQA-only fine-tuning leaves perturbed performance largely untouched.

+ DAUG

Heuristic perturbation augmentation drives the largest single jump in robustness.

+ KL/JS

Consistency regularization stabilizes outputs and improves OOD generalization.

+ ADV

Modality-masked adversarial perturbations close the remaining worst-case gap.

Generalization

Beyond Seen Perturbations

We evaluate on perturbation types and datasets the model was never trained on. The framework still improves robustness.

Seen datasets

  • Mini-ImageNet
  • Caltech-101
  • OpenBookQA
  • MMLU

Unseen perturbations

  • OCR snippets (FUNSD)
  • UI screenshots (RICO)

Unseen datasets

  • Food-101
  • ARC Challenge
Mini-ImageNet pretrain evaluation
Image-heavy: Mini-ImageNet across perturbations.
MMLU pretrain evaluation
Text-heavy: MMLU across visual perturbations.
Comparison

Why training-time, not decoding-time

Prompting and decoding-time fixes do not reshape the underlying cross-modal reliance. Architecture-level fixes improve some representations, but do not directly enforce invariance to irrelevant modality perturbations.

Approach
Family
Targets the failure mode?
CoT prompting
Prompt-time
Indirect — relies on model already being robust
VCD / CausalMM contrastive decoding
Decoding-time
Reweights output, but reliance pattern unchanged
VLMClassifier
Architecture
Improves some representations
I-MoF
Architecture
Improves some representations
Ours
Training-time
Directly enforces invariance via perturbation + consistency
Intuition

Why it works

Our method teaches the model that irrelevant modality changes should not alter the answer. Heuristic perturbations expose realistic interference patterns; adversarial perturbations search worst-case sensitive directions; consistency regularization makes clean and perturbed outputs agree. Together, these components reduce spurious cross-modal reliance while preserving task-relevant reasoning.

Citation

If you find this useful

@inproceedings{cai2026modalityinterference,
  title     = {Diagnosing and Mitigating Modality Interference in Multimodal Large Language Models},
  author    = {Cai, Rui and Li, Bangzheng and Wen, Xiaofei and Chen, Muhao and Zhao, Zhe},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year      = {2026},
  note      = {arXiv:2505.19616}
}