{"id":"https://openalex.org/W7160425254","doi":"https://doi.org/10.48550/arxiv.2605.02908","title":"Memorization In Stable Diffusion Is Unexpectedly Driven by CLIP Embeddings","display_name":"Memorization In Stable Diffusion Is Unexpectedly Driven by CLIP Embeddings","publication_year":2026,"publication_date":"2026-04-06","ids":{"openalex":"https://openalex.org/W7160425254","doi":"https://doi.org/10.48550/arxiv.2605.02908"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.02908","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.02908","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.02908","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5135456768","display_name":"Bumjun Kim","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kim, Bumjun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5049196468","display_name":"Albert No","orcid":"https://orcid.org/0000-0002-6346-4182"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"No, Albert","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.2264000028371811,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.2264000028371811,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11304","display_name":"Advanced Neuroimaging Techniques and Applications","score":0.15299999713897705,"subfield":{"id":"https://openalex.org/subfields/2741","display_name":"Radiology, Nuclear Medicine and Imaging"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},{"id":"https://openalex.org/T11094","display_name":"Face Recognition and Perception","score":0.10189999639987946,"subfield":{"id":"https://openalex.org/subfields/2805","display_name":"Cognitive Neuroscience"},"field":{"id":"https://openalex.org/fields/28","display_name":"Neuroscience"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/interpretability","display_name":"Interpretability","score":0.8166000247001648},{"id":"https://openalex.org/keywords/memorization","display_name":"Memorization","score":0.789900004863739},{"id":"https://openalex.org/keywords/masking","display_name":"Masking (illustration)","score":0.7236999869346619},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.5519999861717224},{"id":"https://openalex.org/keywords/security-token","display_name":"Security token","score":0.5444999933242798},{"id":"https://openalex.org/keywords/hierarchy","display_name":"Hierarchy","score":0.49239999055862427},{"id":"https://openalex.org/keywords/diffusion","display_name":"Diffusion","score":0.4300000071525574}],"concepts":[{"id":"https://openalex.org/C2781067378","wikidata":"https://www.wikidata.org/wiki/Q17027399","display_name":"Interpretability","level":2,"score":0.8166000247001648},{"id":"https://openalex.org/C30038468","wikidata":"https://www.wikidata.org/wiki/Q4354775","display_name":"Memorization","level":2,"score":0.789900004863739},{"id":"https://openalex.org/C2777402240","wikidata":"https://www.wikidata.org/wiki/Q6783436","display_name":"Masking (illustration)","level":2,"score":0.7236999869346619},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6092000007629395},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.5519999861717224},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.5444999933242798},{"id":"https://openalex.org/C31170391","wikidata":"https://www.wikidata.org/wiki/Q188619","display_name":"Hierarchy","level":2,"score":0.49239999055862427},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.43810001015663147},{"id":"https://openalex.org/C69357855","wikidata":"https://www.wikidata.org/wiki/Q163214","display_name":"Diffusion","level":2,"score":0.4300000071525574},{"id":"https://openalex.org/C94124525","wikidata":"https://www.wikidata.org/wiki/Q912550","display_name":"Categorization","level":2,"score":0.4156000018119812},{"id":"https://openalex.org/C112972136","wikidata":"https://www.wikidata.org/wiki/Q7595718","display_name":"Stability (learning theory)","level":2,"score":0.3522000014781952},{"id":"https://openalex.org/C2780586882","wikidata":"https://www.wikidata.org/wiki/Q7520643","display_name":"Simple (philosophy)","level":2,"score":0.3269999921321869},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.29100000858306885},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.28349998593330383},{"id":"https://openalex.org/C90805587","wikidata":"https://www.wikidata.org/wiki/Q10944557","display_name":"Word (group theory)","level":2,"score":0.26660001277923584},{"id":"https://openalex.org/C125411270","wikidata":"https://www.wikidata.org/wiki/Q18653","display_name":"Encoding (memory)","level":2,"score":0.2596000134944916},{"id":"https://openalex.org/C2779200073","wikidata":"https://www.wikidata.org/wiki/Q18395575","display_name":"Visual masking","level":4,"score":0.25699999928474426},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.2556000053882599},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.2554999887943268}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.02908","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.02908","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.02908","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.02908","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Understanding":[0],"how":[1],"textual":[2],"embeddings":[3,26,49],"contribute":[4,58],"to":[5,60,72,97,123],"memorization":[6,70,140],"in":[7,27,62],"text-to-image":[8],"diffusion":[9],"models":[10],"is":[11],"crucial":[12],"for":[13],"both":[14],"interpretability":[15],"and":[16,46,129,144],"safety.":[17],"This":[18,86],"paper":[19],"investigates":[20],"an":[21],"unexpected":[22],"behavior":[23],"of":[24,76,92,136],"CLIP":[25,84],"Stable":[28],"Diffusion,":[29],"revealing":[30],"that":[31,56],"the":[32,78,90,95,119,124,131],"model":[33,96],"disproportionately":[34],"relies":[35],"on":[36,99,105],"specific":[37],"embeddings.":[38],"We":[39,54],"categorize":[40],"input":[41],"tokens":[42],"as":[43],",":[44,45],"with":[47],"corresponding":[48],"$\\mathbf{v}^{\\mathbf{sot}},":[50],"\\mathbf{v}^{\\mathbf{pr}},":[51],"\\mathbf{v}^{\\mathbf{eot}},":[52],"\\mathbf{v}^{\\mathbf{pad}}$.":[53],"discover":[55],"$\\mathbf{v}^{\\mathbf{pr}}$":[57],"minimally":[59],"generation":[61],"memorized":[63],"cases.":[64],"In":[65],"contrast,":[66],"$\\mathbf{v}^{\\mathbf{pad}}$":[67],"strongly":[68],"affect":[69],"due":[71],"their":[73],"structural":[74],"duplication":[75,87],"$\\mathbf{v}^{\\mathbf{eot}}$,":[77,93],"only":[79],"embedding":[80],"explicitly":[81],"optimized":[82],"during":[83],"training.":[85],"unintentionally":[88],"amplifies":[89],"influence":[91],"causing":[94],"over-rely":[98],"it,":[100],"thereby":[101],"driving":[102],"memorization.":[103],"Based":[104],"these":[106],"observations,":[107],"we":[108],"propose":[109],"two":[110],"simple":[111],"yet":[112],"effective":[113],"inference-time":[114],"mitigation":[115],"strategies:":[116],"(1)":[117],"Replacing":[118],"tokenizer's":[120],"default":[121],"from":[122],"!":[125],"token":[126],"before":[127],"embedding,":[128],"masking":[130,135],"$\\mathbf{v}^{\\mathbf{eot}}$;":[132],"(2)":[133],"Partial":[134],"$\\mathbf{v}^{\\mathbf{pad}}$.":[137],"Both":[138],"suppress":[139],"without":[141,148],"degrading":[142],"quality,":[143],"are":[145],"readily":[146],"deployable":[147],"prior":[149],"detection.":[150]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-07T00:00:00"}