Organizations: Univ Toulon, Aix Marseille Univ, LIS, CNRS, France · Mila – Quebec AI Institute · Idiap Research Institute, Martigny, Switzerland · Brno University of Technology, Brno, Czech Republic · pyannoteAI, Toulouse, France · CNRS, ILLS, Montréal, Canada
Qwen3-TTS reports state-of-the-art zero-shot voice cloning, but its technical report leaves open how the model should be conditioned, how it behaves outside read speech, and how it fails. We characterise its two cloning interfaces, in-context learning (ICL) and X-Vector, against Chatterbox, XTTS-v2 and F5-TTS on read, meeting, emotional and air-traffic-control (ATC) speech, using eighteen objective measures, an LLM judge, a spoofing countermeasure and a listening test. Neither interface dominates: ICL clones timbre more closely from correctly transcribed references, X-Vector clones timing, and ICL degrades sharply when a short reference transcript is wrong. Domain explains four times more variance than system choice. Qwen3-TTS leads on intelligibility and pitch register but trails on prosody, and the objective measures rank systems differently from listeners. An off-the-shelf countermeasure flags its clones no more often than genuine recordings, and on ATC radio it fails for every system. Code and audio are released.
Figures & tables
AMI
IEMOCAP
ATCO2
LS
System
Human
Gemini
Gemini
Gemini
Gemini
Qwen3 (ICL)
27.0
12.0
15.0
6.0
14.0
Qwen3 (X-Vec)
35.6
11.0
7.0
3.0
10.0
Chatterbox
9.0
11.0
10.0
1.0
9.0
XTTS-v2
6.0
3.0
3.0
4.0
26.0
F5-TTS
1.0
5.0
5.0
5.0
7.0
Table 1: 2AFC fooling rate (%) on 100 randomly sampled utterances per system and corpus, shifted condition.
Corpus
Qwen3
Qwen3
Chatterbox
XTTS-v2
F5-TTS
(ICL)
(X-Vec)
AMI
Det.
13.0
1.0
24.0
89.0
36.0
FA
17.0
17.0
19.0
17.0
14.0
IEMOCAP
Det.
10.0
8.0
12.0
91.0
11.0
FA
14.0
14.0
14.0
14.0
14.0
ATCO2
Det.
92.0
87.0
95.0
91.0
75.0
Table 2: AASIST detection and false-alarm rates (%) per corpus and system, shifted condition. Bold: detection clearly above the paired false-alarm rate.
Figure 1: Hallucination rate of Qwen3-TTS ICL against reference transcript length (shifted condition).
System
Corpus
SSpk
SPro
SF0
SInt
S
Qwen3 (ICL)
AMI
52.2
15.7
25.2
50.8
36.0
ATCO2
31.6
21.5
10.6
15.4
19.8
LibriSpeech
80.2
33.2
21.7
64.0
49.8
IEMOCAP
32.9
25.9
15.0
38.2
28.0
Qwen3 (X-Vector)
AMI
43.6
23.7
26.6
53.3
36.8
ATCO2
34.4
24.1
15.0
15.9
22.4
Table 3: Overall score S and its four dimension scores per system and corpus, shifted condition.
Artificially generated speech is increasingly embedded in everyday life. Voice cloning in particular enables applications where identity preservation is important, such as completing a recording, dubbing in a new language, or preserving the voices of individuals with speech loss. However, in our work, we find that despite the term, voice cloning does not faithfully ''clone'' an individual's voice. Instead, we find that widely-used voice cloning models systematically apply style transfer to source voices. As rated by human annotators, cloned voices are perceived as more authoritative, warm, customer-service-like, and human-like compared to their sources. Human annotators also report greater trust in cloned voices than source voices, and a greater willingness to disclose sensitive personal information to them. Our work furthermore shows that voice cloning leads to homogenization of speaker characteristics, as measured by reduced variance in accent, speaking rate, and the audio embedding space. Together, our results highlight a new set of limitations and risks of voice cloning technology and their potential impact on human behavior.
Long-form text-to-speech (TTS) enables multi-turn conversations with consistent prosody and higher quality voice cloning from longer reference audio. Recent open-weights autoregressive TTS models such as Qwen3-TTS and VoxCPM2 attain state-of-the-art word error rate (WER) and speaker similarity (SIM) on short-form prompts but significantly deteriorate when used with long-form prompts. We propose Localized Attention-Constrained Inference (LACI), an inference-only method to detect TTS errors in near real-time, roll back to the error onset and regenerate with temporary guardrails, adding negligible computational overhead. Using LACI, we improve worst-of-N WER across 10 RNG seeds for Qwen3-TTS-0.6B from 35.2% to 3.4% on prompts longer than 1500 words, even surpassing its short-form reliability of 5.4% on prompts with fewer than 500 words. To demonstrate the efficacy of LACI on voice cloning reliability, we propose a sliding-window version of the SIM metric that we call wSIM. wSIM exposes several novel failure patterns that are not captured by SIM. LACI improves worst-of-N wSIM from 0.01 to 0.47 on 120 seconds of reference audio while reducing the rate of catastrophic generations with WER above 30% from 26% to below 1%
Rongxiang Wang, Berkin Durmus, Aysegul Orhon +2
Argmax, Inc. · University of Virginia · Bilkent University
TTS systems with autoregressive semantic modeling have demonstrated strong zero-shot voice cloning performance and rich expressive variation, but their sequential decoding incurs substantial latency. Non-autoregressive alternatives offer much faster generation, yet often rely on more restrictive reference conditioning, such as requiring transcripts of the reference speech during inference. We present Tacit-TTS, an efficient transcript-free zero-shot voice cloning system distilled from IndexTTS2. Our model replaces autoregressive text-to-semantic decoding with masked non-autoregressive generation, introduces training-free acoustic length estimation, and accelerates the flow-matching renderer through ReFlow distillation. Across two English and two Mandarin datasets, Tacit-TTS achieves competitive zero-shot quality while generating speech over 10x faster than IndexTTS2 for utterances longer than 5 seconds. Its transcript-free conditioning further supports cross-lingual and non-lexical references. We validate this capability using references from eight other languages, infant babble, and synthetic gibberish, where transcript-dependent systems often degrade or fail due to unreliable ASR transcripts.