{"id":"https://openalex.org/W7161258664","doi":"https://doi.org/10.48550/arxiv.2605.15152","title":"Widening the Gap: Exploiting LLM Quantization via Outlier Injection","display_name":"Widening the Gap: Exploiting LLM Quantization via Outlier Injection","publication_year":2026,"publication_date":"2026-05-14","ids":{"openalex":"https://openalex.org/W7161258664","doi":"https://doi.org/10.48550/arxiv.2605.15152"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.15152","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.15152","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.15152","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136229526","display_name":"Xiaohua Zhan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhan, Xiaohua","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136212061","display_name":"Kazuki Egashira","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Egashira, Kazuki","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043521320","display_name":"Robin Staab","orcid":"https://orcid.org/0009-0009-9040-1214"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Staab, Robin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136217230","display_name":"Mark Vero","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Vero, Mark","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136260358","display_name":"Martin Vechev","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Vechev, Martin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.8335999846458435,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.8335999846458435,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.07410000264644623,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.014100000262260437,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/quantization","display_name":"Quantization (signal processing)","score":0.8377000093460083},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.714900016784668},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.5388000011444092},{"id":"https://openalex.org/keywords/outlier","display_name":"Outlier","score":0.5267999768257141},{"id":"https://openalex.org/keywords/limiting","display_name":"Limiting","score":0.4733999967575073},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.3625999987125397}],"concepts":[{"id":"https://openalex.org/C28855332","wikidata":"https://www.wikidata.org/wiki/Q198099","display_name":"Quantization (signal processing)","level":2,"score":0.8377000093460083},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.714900016784668},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5968999862670898},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.5388000011444092},{"id":"https://openalex.org/C79337645","wikidata":"https://www.wikidata.org/wiki/Q779824","display_name":"Outlier","level":2,"score":0.5267999768257141},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.4959000051021576},{"id":"https://openalex.org/C188198153","wikidata":"https://www.wikidata.org/wiki/Q1613840","display_name":"Limiting","level":2,"score":0.4733999967575073},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.38190001249313354},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.3625999987125397},{"id":"https://openalex.org/C199833920","wikidata":"https://www.wikidata.org/wiki/Q612536","display_name":"Vector quantization","level":2,"score":0.35040000081062317},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3375999927520752},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.32760000228881836},{"id":"https://openalex.org/C204323151","wikidata":"https://www.wikidata.org/wiki/Q905424","display_name":"Range (aeronautics)","level":2,"score":0.31700000166893005},{"id":"https://openalex.org/C190470478","wikidata":"https://www.wikidata.org/wiki/Q2370229","display_name":"Invariant (physics)","level":2,"score":0.30219998955726624},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.29919999837875366},{"id":"https://openalex.org/C2994203483","wikidata":"https://www.wikidata.org/wiki/Q171957","display_name":"Hide and seek","level":2,"score":0.26190000772476196}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.15152","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.15152","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.15152","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.15152","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"LLM":[0],"quantization":[1,13,50,107,125,202,221,235],"has":[2,10],"become":[3],"essential":[4],"for":[5,212],"memory-efficient":[6],"deployment.":[7],"Recent":[8],"work":[9],"shown":[11],"that":[12,26,59,92,97,169,190,216],"schemes":[14,227],"can":[15,55,98,129,148,160],"pose":[16],"critical":[17],"security":[18,218],"risks:":[19],"an":[20,146],"adversary":[21,147],"may":[22],"release":[23],"a":[24,102,118,150,171,198],"model":[25],"appears":[27],"benign":[28,166],"in":[29,155],"full":[30],"precision":[31],"but":[32,228],"exhibits":[33],"malicious":[34,95,175],"behavior":[35,96],"once":[36],"quantized":[37],"by":[38,101,122,139],"users.":[39],"However,":[40],"existing":[41],"quantization-conditioned":[42,90],"attacks":[43,68,207],"have":[44,69],"been":[45],"limited":[46],"to":[47,72,133,136,163,225],"relatively":[48],"simple":[49,119],"methods,":[51],"where":[52],"the":[53,63,88,156,213,217],"attacker":[54],"estimate":[56],"weight":[57,144,153],"regions":[58],"remain":[60],"invariant":[61],"under":[62],"target":[64],"quantization.":[65,178],"Notably,":[66],"prior":[67,206],"consistently":[70,93],"failed":[71],"compromise":[73],"more":[74],"popular":[75],"and":[76,112,186],"sophisticated":[77],"schemes,":[78],"limiting":[79],"their":[80],"practical":[81],"impact.":[82],"In":[83],"this":[84],"work,":[85],"we":[86,188],"introduce":[87],"first":[89,214],"attack":[91,116,184,192],"induces":[94],"be":[99,134,161],"triggered":[100],"broad":[103,199],"range":[104,173,200],"of":[105,174,201,220],"advanced":[106],"techniques,":[108],"including":[109],"AWQ,":[110],"GPTQ,":[111],"GGUF":[113],"I-quants.":[114],"Our":[115,209],"exploits":[117],"property":[120],"shared":[121],"many":[123],"modern":[124],"methods:":[126],"large":[127],"outliers":[128,141],"cause":[130],"other":[131],"weights":[132],"rounded":[135],"zero.":[137],"Consequently,":[138],"injecting":[140],"into":[142],"specific":[143],"blocks,":[145],"induce":[149],"targeted,":[151],"predictable":[152],"collapse":[154],"model.":[157],"This":[158],"effect":[159],"used":[162],"craft":[164],"seemingly":[165],"full-precision":[167],"models":[168],"exhibit":[170],"wide":[172],"behaviors":[176],"after":[177],"Through":[179],"extensive":[180],"evaluation":[181],"across":[182,232],"three":[183],"scenarios":[185],"LLMs,":[187],"show":[189],"our":[191],"achieves":[193],"high":[194],"success":[195],"rates":[196],"against":[197],"methods":[203],"on":[204],"which":[205],"fail.":[208],"results":[210],"demonstrate,":[211],"time,":[215],"risks":[219],"are":[222,229],"not":[223],"restricted":[224],"simpler":[226],"broadly":[230],"relevant":[231],"complex,":[233],"widely-used":[234],"methods.":[236]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-16T00:00:00"}