PhysPatch: A Physically Realizable and Transferable Adversarial Patch Attack for Multimodal Large Language Models-based Autonomous Driving Systems

The official implementation of PhysPatch; this paper was accepted by AAAI 2026.

Code

Please refer to code/readme.md

Citation

@article{guo2025physpatch,
  title={PhysPatch: A Physically Realizable and Transferable Adversarial Patch Attack for Multimodal Large Language Models-based Autonomous Driving Systems},
  author={Guo, Qi and Jia, Xiaojun and Pang, Shanmin and Qin, Simeng and Wang, Lin and Jia, Ju and Liu, Yang and Guo, Qing},
  journal={arXiv preprint arXiv:2508.05167},
  year={2025}
}