Q. Guo, “PhysPatch: A Physically Realizable and Transferable Adversarial Patch Attack for Multimodal Large Language Models-based Autonomous Driving Systems”, AAAI, vol. 40, no. 6, pp. 4412–4420, Mar. 2026.